Ahtna, an organization managing sensitive personal data, reported a data breach to the Attorney General of New Hampshire after detecting unauthorized access to its systems. The incident was first identified on July 28, 2025, but the breach occurred between April 20 and June 1, 2025, during which an unauthorized third party may have accessed and acquired sensitive personal identifiable information (PII). The compromised data includes names, Social Security numbers, and Individual Taxpayer Identification Numbers (ITINs). Following the discovery, Ahtna initiated an investigation to assess the scope of the breach and identify affected individuals. By November 21, 2025, the company began notifying impacted parties via mail, offering complimentary credit monitoring services as a remedial measure. The breach notice indicates that the exposure of such highly sensitive financial and identification data poses significant risks, including identity theft, financial fraud, and long-term reputational harm to both the company and the affected individuals. The incident underscores vulnerabilities in Ahtna’s data protection measures, raising concerns about the security of personally identifiable information under its custody. The delayed detection (nearly three months after the initial breach period) further exacerbates the potential consequences, as the exposed data could have been exploited during the interim.