Nium Discloses Data Breach Impacting 13 Massachusetts Residents On December 10, 2025, global payments platform Nium, Inc. reported a data breach to the Massachusetts Attorney General’s office, affecting 13 individuals in the state. The incident stemmed from unauthorized access to the company’s file system, resulting in the download of sensitive customer data. The breach was first detected on November 3, 2025, when Nium’s security teams identified suspicious access attempts targeting its file storage infrastructure. An investigation revealed that an old file from 2022, stored in a system meant for technical logs rather than personal data, had been compromised. The exposed information included names, email addresses, physical addresses, phone numbers, Social Security numbers, and dates of birth—all classified as personally identifiable information (PII). No protected health information (PHI) or financial details were accessed. While the breach was quickly contained, the exposure of Social Security numbers heightens the risk of identity theft and phishing attacks for affected individuals. Nium has notified impacted customers via email and is providing complimentary credit monitoring services. The company has also set up a dedicated email ([email protected]) for inquiries, monitored by senior management. The incident underscores the persistent threat of unauthorized data access, even in systems not primarily designed for storing sensitive information.