On December 1, 2025, Haley's Metal Shop, Inc. identified an email phishing incident involving one employee's email account. The company promptly secured the account and began an investigation. The investigation determined that an unauthorized actor accessed the employee's email account only on December 1, 2025. On January 23, 2026, the company found that the emails and attachments in the account contained personal information.
The breach involved names, Social Security numbers, driver's license numbers, and financial account information. The breach affected at least 57 individuals, with 54 of those being residents of Maine. At least one Massachusetts resident was also impacted. The full extent of individuals affected in other states is not publicly known. Identity theft protection services were offered for one year through Experian.
Details can emerge later, and notices may be delayed.