GoHenry, a financial services company providing debit cards and financial education for children, experienced a security incident where unauthorized access was gained to certain customer profiles between September 19, 2022, and October 13, 2022. The breach was later confirmed on April 3, 2023, revealing that the personal information of 23 Maine residents had been accessed. The exposed data included names and GoHenry card details, though no further specifics (e.g., financial transactions, passwords, or broader customer base impact) were disclosed. Affected individuals were notified via mailed letters starting May 8, 2023. The incident highlights a targeted compromise of customer data, raising concerns over potential fraud or misuse of payment card information. While the scope appears limited to a subset of users in Maine, the exposure of card-related data poses risks of financial fraud or identity theft. The delayed disclosure (nearly 7 months after the initial breach period) further underscores challenges in detection and response. No evidence suggests ransomware or systemic operational disruption, but the breach underscores vulnerabilities in customer data protection within fintech platforms catering to minors.