Empower Group Suffers Alleged Data Breach, Exposing Millions of Records On April 16, 2026, New York-based financial services provider Empower Group reportedly fell victim to a data breach allegedly carried out by the threat actor DragonForce. The group claimed to have exfiltrated 316 GB of sensitive data, including 6,691,415 records containing Social Security numbers, names, addresses, phone numbers, email addresses, and dates of birth. The breach was first detected by Ransomware.Live, a dark web monitoring platform, which published an indexed database of the compromised information. At the time of reporting, Empower Group had not confirmed the breach, leaving the full scope and impact unverified. Legal teams, including those affiliated with ClassAction.org, are investigating the incident to determine whether a class action lawsuit can be filed on behalf of affected individuals including employees, investors, and clients. If successful, such a lawsuit could seek compensation for privacy violations, financial losses, and other damages resulting from the exposure. The breach underscores growing risks for financial service providers handling sensitive personal and business data, though official confirmation and further details remain pending.