The Maine Office of the Attorney General disclosed that Toyo Tanso suffered an external system breach (hacking) between May 24–25, 2021, compromising the personal data of 1,092 individuals, including at least one Maine resident whose Social Security number (SSN) may have been accessed. The breach was detected, and affected individuals were notified via letters on October 20, 2021, nearly five months after the incident. As a remedial measure, Toyo Tanso offered one year of identity theft protection services through Experian to mitigate potential risks like fraud or unauthorized use of exposed data. The breach primarily involved personally identifiable information (PII), with the SSN being a high-value target for cybercriminals. While the exact method of infiltration (e.g., phishing, exploit of a vulnerability) was not specified, the delay in notification could exacerbate risks such as identity theft or financial fraud for the victims. The company’s response included proactive monitoring but did not disclose whether the attackers exfiltrated the data for malicious purposes beyond potential access. The incident highlights vulnerabilities in Toyo Tanso’s cybersecurity defenses, particularly in safeguarding sensitive employee or customer data from external threats.