Grayback Forestry Data Breach Exposes Sensitive Information of Over 5,000 Individuals Grayback Forestry, Inc., a Merlin, Oregon-based wildfire suppression and forest restoration company, confirmed a data breach in early 2026 that compromised the personal information of 5,026 individuals across multiple U.S. states. The company, which provides specialized services to federal, state, and private clients, detected suspicious activity in its systems on January 6, 2026, prompting an immediate investigation with external cybersecurity experts. The breach occurred between January 5 and 6, 2026, when an unauthorized actor accessed and likely exfiltrated files containing sensitive data. A detailed review concluded on February 20, 2026, revealing that exposed information included names and Social Security numbers. Affected individuals, primarily residents of Maine, Massachusetts, New Hampshire, and other states, began receiving written notifications on March 13, 2026. Grayback Forestry, founded in 1979, operates in Oregon and Montana and employs over 40 people. The firm specializes in wildfire suppression, fuels management, and disaster response, offering services such as mobile showers and potable water trucks. Legal representatives are now investigating potential compensation claims for those impacted by the breach.