NESCTC reported a data breach to the Attorney General of Massachusetts, revealing that a cybersecurity attack occurred around April 14, 2025. The investigation confirmed unauthorized access to its network, exposing sensitive personal identifiable information (PII) of individuals. The compromised data includes names, Social Security numbers, addresses, dates of birth, driver’s license numbers, and financial account numbers. The breach impacted varying sets of personal data per individual, with NESCTC initiating a review to identify affected parties. On November 11, 2025, the company began mailing notification letters to victims, offering complimentary credit monitoring services as a remedial measure. The incident underscores a severe compromise of customer PII, posing risks of identity theft, financial fraud, and reputational harm. The breach notice was formally filed with Massachusetts authorities, highlighting the regulatory and operational consequences of the attack.