On November 4, 2020, Willdan Group, Inc. experienced an external system breach (hacking) that resulted in a data breach reported to the Maine Office of the Attorney General on June 4, 2021. The incident compromised sensitive personal information, specifically Driver's License Numbers and Non-Driver Identification Card Numbers, affecting 840 individuals, including two Maine residents. The breach was attributed to unauthorized access by external actors, indicating a targeted cyber intrusion. While the exact method of exploitation (e.g., phishing, vulnerability exploitation) was not detailed, the exposure of government-issued identification numbers poses significant risks, including identity theft, fraud, and potential misuse in financial or legal contexts. The delayed disclosure (nearly seven months after the breach) may have further exacerbated risks for affected individuals, as timely mitigation measures—such as credit monitoring or ID replacement—could have been delayed. The nature of the compromised data (driver’s licenses/ID cards) suggests the attackers gained access to a database containing personally identifiable information (PII), though the article does not specify whether additional financial or employment-related records were exposed. The breach underscores vulnerabilities in Willdan Group’s cybersecurity defenses, particularly against external threats aiming to extract high-value identification data.