Belkorp Ag, a California-based agricultural equipment dealer, suffered a major cyberattack between April 18–26, 2025, where a threat actor ('hensi') infiltrated its network and exfiltrated sensitive data. The breach exposed complete network data, full databases, 1,000+ employee PDF forms (including Social Security numbers), and budget records (2015–2025). A later investigation (revealed September 2, 2025) confirmed the compromise of personally identifiable information (PII), including names, SSNs, dates of birth, driver’s licenses, passports, financial accounts, biometric data, medical records, health insurance details, and treatment histories. The company notified affected individuals via mail (September 29, 2025), disclosed the breach to state authorities (California, Massachusetts, New Hampshire), and offered free IDX credit monitoring. The attack’s scale—targeting employee and customer PII, financial, and medical data—poses severe risks of identity theft, fraud, and reputational damage. Belkorp secured its systems, involved law enforcement, and set up a dedicated helpline for victims.