Canary Benefits Data Breach Exposes Sensitive PII in Undisclosed Incident A data breach at Canary Benefits Inc., a New York City-based fintech company, has compromised the personally identifiable information (PII) of an unspecified number of individuals. The breach was reported to the Massachusetts Attorney General’s office on December 17, 2025, though details about the cause, method, or responsible parties remain undisclosed. The exposed data includes names and Social Security numbers, heightening risks of identity theft. Canary Benefits has not provided further information on how the unauthorized access occurred. In response, the company is offering 24 months of complimentary identity protection services through Cyberscout (a TransUnion company), including credit monitoring, credit report access, and credit score tracking. Affected individuals will receive enrollment instructions with a unique activation code. A dedicated call center (800-405-6108) has been established for inquiries, operating Monday through Friday, 8 a.m. to 8 p.m. ET. The full scope of the breach and its impact on affected parties are still under review.