RMS Data Breach Exposes Sensitive Personal Information in 2025-2026 Incident RMS recently disclosed a data breach to the New Hampshire Attorney General, revealing that unauthorized access to its email environment may have compromised sensitive personal identifiable information (PII). The incident was detected in January 2026, prompting an internal investigation. The breach occurred between November 24, 2025, and January 7, 2026, during which an unauthorized third party accessed emails containing PII. The exposed data varies by individual but includes names, Social Security numbers, dates of birth, account numbers, and routing numbers. Following a review to identify affected individuals, RMS began mailing breach notification letters on March 16, 2026. The notices detail the specific types of compromised information and offer complimentary credit monitoring services to impacted individuals. The breach report filed with the New Hampshire Attorney General provides further documentation.