Shingle & Gibb Automation, a New Jersey-based industrial automation firm, experienced a data breach stemming from an external system breach (hacking) that occurred on November 12, 2025. The company discovered this breach on February 20, 2026, and subsequently began notifying affected individuals on March 25, 2026. The Akira ransomware group claimed responsibility for the incident, asserting the exfiltration of 25GB of data.
The breach involved the compromise of names and other personal identifiers for an estimated 529 individuals. For residents of Maine, specifically, 4 individuals were affected. The investigation confirmed that an unauthorized third party obtained specific files. Identity theft protection services through Experian IdentityWorks 3B for 12 months were offered to affected individuals. The specific types of "other personal identifiers" have not been detailed, and there is no indication of financial, medical, or Social Security number data being exposed.
While there is an ongoing investigation by a law firm regarding potential claims for breach notice recipients, no class action lawsuits have been filed. Details about this incident can emerge later, and official notices may be delayed.