On April 30, 2025, the Maine Office of the Attorney General disclosed a data breach at iHeartMedia + Entertainment, Inc., occurring between December 24–27, 2024. The incident was classified as an external system breach (hacking), compromising the sensitive personal data of three Maine residents. The exposed information included Social Security numbers, driver’s license numbers, and financial account details—highly sensitive identifiers that elevate risks of identity theft and financial fraud. In response, iHeartMedia is providing one year of credit monitoring and identity theft protection to the affected individuals. While the breach’s scope appears limited to three residents, the nature of the stolen data (financial and government-issued identifiers) suggests potential for severe downstream consequences, including unauthorized account access, loan fraud, or long-term identity exploitation. The breach underscores vulnerabilities in iHeartMedia’s external systems, though no further details on the attack vector (e.g., phishing, exploit) or broader organizational impact were disclosed.