Wallace Saunders reported a data security event to Massachusetts regulators after identifying unexpected network activity on May 18, 2026. The official notice states that an unauthorized actor accessed the network from May 16 through May 18, 2026, and could access certain files. Wallace Saunders began notifying affected individuals on July 2, 2026.
The information involved varied by individual and may have included names combined with Social Security numbers, dates of birth, driver's license numbers, financial account information, medical information, and materials prepared or provided during legal representation. The Massachusetts breach report lists one affected Massachusetts resident. The available sources do not establish a broader entity-wide total or confirm misuse of the information.
The public notice was listed by Massachusetts on July 6, 2026, and later source materials stated that further details remained limited. The investigation and notification process may produce additional information about the affected population and specific data elements over time.