Hightower Holding Says Data Breach Affected 131,483 People
Summary
Hightower Holding says attackers used compromised credentials to access and exfiltrate files in January 2026. The company reported that 131,483 people were affected and that the files included personal information.
Key points
- Hightower Holding reported a cyberattack in early January 2026, with files exfiltrated between January 8 and 9.
- The company attributed the breach to compromised user credentials.
- The files reportedly contained names, Social Security numbers, and driver’s license numbers.
- Hightower notified Maine’s attorney general that 131,483 people were affected.
- The company said it had no indication the information had been used for identity theft or fraud.
- Affected individuals are being offered 12 months of identity-theft and credit-monitoring services.
- Hightower has not identified the responsible threat actor; SecurityWeek reported no known extortion-group claims.
Article Details
- Victim Organization
- Hightower Holding
- Incident Type
- Cyberattack resulting in a data breach and exfiltration of files after user credentials were compromised
- Data Types Exposed
- Names
- Social Security numbers
- Driver’s license numbers
- Affected Records
- 131,483 people
- Ransom Or Extortion
- Hightower Holding has not identified the threat actor. SecurityWeek reported that it had seen no known extortion groups claiming responsibility.
- Claim Status
- confirmed