Industrial Acceptance Corporation (IAC), a consumer finance company, experienced a hacking-related incident in February 2025. The company disclosed the breach in May 2026, when it began notifying affected individuals. The breach involved a ransomware attack attributed to the INC ransomware group, which infiltrated IAC's network and exfiltrated files around March 4, 2025.
The breach affected 79,216 individuals across the United States, including 226 residents of Maine. The exposed data types include names, Social Security numbers, driver's license numbers, dates of birth, addresses, government IDs, medical information, and financial information. IAC provided 12 months of complimentary credit monitoring and identity protection services through Cyberscout. The breach was reported to the Maine Attorney General and the California Attorney General.
It is important for individuals who received a notification letter to review it carefully and utilize any offered identity monitoring services. Further details may emerge as investigations continue.