Abri Reports Data Breach Exposing Sensitive Personal and Health Information Abri, a provider of personal and health-related services, recently disclosed a data breach in which an unauthorized party accessed and potentially exfiltrated sensitive information from its systems. The company first detected the incident in mid-2024 and launched an investigation to assess the scope of the compromise. The breach occurred between May 3 and May 4, 2024, during which the attacker may have accessed a range of personally identifiable information (PII) and protected health information (PHI). The exposed data varies by individual but includes names, Social Security numbers, dates of birth, driver’s license or state ID numbers, financial account details, payment card numbers, medical records, health insurance information, digital signatures, and birth or marriage certificates. Abri completed its review of the affected data and began notifying impacted individuals on December 30, 2025, via mailed breach notification letters. As part of its response, the company is offering complimentary credit monitoring services to those affected. The breach notice filed with the Massachusetts Attorney General’s office provides further details on the exposed information for residents of the state.