Canary Benefits Data Breach Exposes Sensitive Consumer Information In December 2025, Canary Benefits, Inc., a New York City-based fintech company specializing in emergency relief fund programs, reported a cybersecurity incident that may have compromised sensitive consumer data. The breach was disclosed to the Massachusetts Attorney General’s office on December 17, 2025, with affected individuals notified by mail. Canary Benefits operates Grant Circle, a white-labeled platform that helps employers and nonprofits administer emergency cash grants to individuals in financial distress. The company serves clients ranging from small businesses to large corporations and community foundations. The exposed data may include: - First and last names - Social Security numbers As part of its response, Canary Benefits is offering affected individuals 24 months of free credit monitoring and identity theft protection through Cyberscout (a TransUnion company), with enrollment required within 90 days of notification. The law firm Shamis & Gentile P.A. is investigating the breach and potential legal claims for compensation on behalf of impacted individuals. The incident highlights risks associated with the handling of personally identifiable information (PII) in financial services, particularly for organizations managing sensitive relief programs.