The Rochester Philharmonic Orchestra (RPO), a nonprofit organization, experienced a data breach between October 21 and November 11, 2025, due to unauthorized access to its network. The ransomware group Akira claimed responsibility on November 25, 2025. This incident was confirmed by RPO, and the Maine Attorney General also filed public notice regarding the breach.
Personal data for approximately 1,726 individuals in the United States, including three residents of Maine, was exposed. The compromised data types include names, Social Security numbers, driver’s license numbers, passport numbers, dates of birth, addresses, government IDs, medical information, and financial information. RPO has not found evidence of misuse of the exposed data. The company is offering 24 months of complimentary identity protection services through IDX to affected individuals.
Details can emerge as investigations continue, and notification processes may still be ongoing.