Pollard & Associates, Inc., a retirement plan consulting and third-party administration firm, suffered a data breach discovered on May 15, 2025, after detecting suspicious network activity. Investigation confirmed that an unauthorized actor had copied files as early as April 8, 2025. The breach exposed sensitive personal and financial data of 17,907 individuals, including names, Social Security numbers, and financial account information. The company initiated notifications to affected individuals via mail on September 16, 2025, and reported the incident to the Maine, Montana, and Vermont Attorney Generals' offices. In response, Pollard & Associates secured its systems, involved law enforcement, and offered 12 months of free IDX credit monitoring to victims. The breach posed significant risks of identity theft, financial fraud, and phishing attacks targeting exposed individuals. The incident underscored vulnerabilities in handling highly sensitive retirement and financial data, with potential long-term repercussions for trust and regulatory compliance.