William C. Smith & Company Data Breach Exposes Sensitive Personal Information Washington, D.C.-based real estate firm William C. Smith and Company (WC Smith) disclosed a data breach after detecting suspicious activity on its network on May 18, 2025. An investigation revealed that an unauthorized actor accessed and exfiltrated files containing personally identifiable information (PII) between May 5 and May 18, 2025. WC Smith, founded in 1968, employs nearly 500 people and operates in the Washington metropolitan area, offering real estate, construction, and electrical services. The breach impacted an undetermined number of individuals, though at least three Maine residents were confirmed affected, according to a filing with the Maine Attorney General. Affected individuals were notified via written letters on January 12, 2026, nearly eight months after the incident. The exposed data includes names and Social Security numbers, heightening risks of identity theft and fraud. WC Smith reported the breach to federal law enforcement and state regulators and is offering 12 months of complimentary credit monitoring through Experian to impacted parties. Class action law firm Shamis & Gentile P.A. is investigating potential legal action on behalf of those affected, citing possible compensation for damages resulting from the breach. The firm is currently reviewing claims to determine eligibility for a class action lawsuit.