NPG Reports Data Breach Affecting Sensitive Personal Information NPG, a Massachusetts-based organization, recently disclosed a data breach to the state’s Attorney General after detecting unauthorized access to its network. The incident, discovered in late September 2025, involved potential exposure of sensitive personal identifiable information (PII) between September 9 and September 25, 2025. An investigation confirmed that an unauthorized third party accessed and acquired data, though the exact scope remains under review. The compromised information may include names, Social Security numbers, and dates of birth, with variations in exposure depending on the individual. In response, NPG has begun notifying affected individuals via mail, detailing the specific data impacted. As part of the remediation efforts, the company is offering 12 months of complimentary credit monitoring services to those affected. The breach notification filed with Massachusetts authorities provides further details on the incident.