The Maine Office of the Attorney General disclosed a data breach affecting Infinex Investments, Inc. on June 28, 2022. The incident stemmed from an inadvertent disclosure of a 401(k) statement to an unauthorized participant, exposing the financial account information of one individual. The breach was accidental, involving the mishandling of sensitive financial records rather than a targeted cyber intrusion or malicious exploitation. While the scope was limited to a single person’s data, the exposed information—linked to retirement savings—carries financial privacy risks. No evidence suggested broader compromise, ransomware, or systemic vulnerabilities. The company likely addressed the issue through internal corrective measures, such as reinforcing data-sharing protocols and notifying the affected individual. The incident highlights the importance of strict access controls, even in non-malicious scenarios, to prevent unintended exposure of personal financial details.