The Maine Office of the Attorney General disclosed a ransomware attack targeting Cayan, LLC, which occurred between October 29, 2020, and November 18, 2020, and was reported on July 13, 2021. The incident compromised sensitive personal data, including Social Security Numbers (SSNs), affecting 4,892 individuals, among whom 10 were Maine residents. The breach exposed victims to potential identity theft risks, prompting the company to offer identity theft protection services as a remedial measure. The attack’s nature—ransomware—suggests malicious encryption of data, likely coupled with threats of exposure unless a ransom was paid. While the report does not specify whether the ransom was paid or if data was exfiltrated beyond SSNs, the involvement of highly sensitive identifiers elevates the severity. The breach underscores vulnerabilities in Cayan’s cybersecurity defenses, particularly against ransomware, which has increasingly targeted financial service providers and payment processors like Cayan to exploit valuable customer data.