THE breach at Auger & Auger lasted all of 25 minutes, from 17 February 2026. On 30 March 2026 the North Carolina personal injury law firm notified those affected and offered 1 year of complimentary identity protection services from EPIC-Privacy D Solutions. In their notification letter, Auger & Auger said the data involved might include names, dates of birth, social security numbers, driver’s licence numbers, other government-issued identifiers, and medical information.
According to the Maine Attorney General’s Office submission dated 30 March 2026, a total of 5,102 people were affected, of whom 2 were Maine residents. Within days, at least five law firms claimed to be investigating the breach and were seeking potential plaintiffs or claimants for a possible class-action lawsuit. No gang has claimed responsibility for the incident, though several law firms moved quickly to engage potential clients.