Harnish Group Data Breach Exposes Sensitive Personal Information On November 11, 2025, the Harnish Group detected a data breach involving unauthorized access to sensitive personal identifiable information (PII) stored in its systems. Following the discovery, the company launched an investigation to assess the scope and impact of the incident. The investigation confirmed that an unauthorized third party had accessed and potentially acquired PII, including names and Social Security numbers. The exact data exposed varies by individual. On December 22, 2025, Harnish Group began notifying affected individuals via mail, providing details on the compromised information and offering complimentary credit monitoring services. The breach notice was filed with the Attorney General of Maine, where impacted residents were among the first to be notified. The incident highlights ongoing risks to personal data security in corporate systems.