A New Leaf, Inc. experienced a data breach reported by the Maine Office of the Attorney General on December 30, 2021, though the incident was initially discovered on March 30, 2021. The breach stemmed from external hacking, compromising sensitive personal data of 17,150 individuals, including at least one Maine resident. The exposed information included Social Security Numbers (SSNs), a high-value target for identity theft and financial fraud. In response, the company offered 12 months of identity theft protection services through Experian to affected individuals. The breach highlights significant risks associated with unauthorized access to personally identifiable information (PII), particularly SSNs, which can enable long-term identity theft, financial exploitation, and reputational harm. The delay between discovery (March 2021) and public disclosure (December 2021) may have further exacerbated vulnerabilities for impacted individuals. The incident underscores the critical need for robust cybersecurity measures, timely breach notifications, and proactive mitigation strategies to protect customer data and maintain trust.