Ailco Data Breach Exposes Loan Applicant Info Including SSNs

Ailco Equipment Finance Group Inc., a Wisconsin-based equipment financing company that has provided financing solutions to small businesses and mid-market companies since 1997, disclosed that a data breach at one of its service providers may have exposed the personal information of loan applicants.

The service provider, Kaaj Technologies Inc., provides a credit analysis platform that Ailco uses to process its small business loan applications.

The breach was reported to the Vermont Attorney General on March 26, 2026. Ailco learned of the incident on Feb. 11, 2026, and began sending notification letters on March 26, 2026.

The total number of affected individuals was not disclosed in the filing.

What happened in the Ailco data breach

Kaaj Technologies recently discovered anomalous activity within its computer environment. In response, Kaaj launched an investigation with the assistance of third-party forensic specialists to determine the nature and scope of the activity.

The investigation determined that Kaaj's environment was subject to unauthorized access on Jan. 13, 2026, and that some data was copied during the incident.

The types of information in the database varied by individual but generally included an applicant's name, address and Social Security number.

The raw loan package files that Ailco provided to Kaaj were not stored in the affected database and were not impacted by this incident.

Ailco's response to the breach

Given that Social Security numbers were among the types of information potentially exposed, Kaaj is providing affected individuals with complimentary credit monitoring and identity protection services through Experian IdentityWorks at no cost. The service includes credit monitoring of the individual's Experian credit file, identity restoration support and up to $1 million in identity theft insurance.

Identity restoration specialists are immediately available to help affected individuals address both credit-related and non-credit-related fraud. This includes assistance with contacting credit grantors to dispute charges and close accounts, placing a freeze on credit files and contacting government agencies to help restore an individual's identity.

Affected individuals can enroll by visiting the Experian IdentityWorks enrollment page and entering the activation code included in their notification letter. The deadline to enroll is June 30, 2026.

For questions about the incident or assistance with enrollment, individuals can call 833-745-2427, Monday through Friday, 8 a.m. to 8 p.m. Central time, excluding major U.S. holidays.

They may also write to Kaaj Technologies at 95 Third St., Second Floor, San Francisco, CA 94103.

Steps to take if your information was exposed

• Place a credit freeze with Equifax (1-888-298-0045), Experian (1-888-397-3742) and TransUnion (1-833-799-5355) to help prevent new accounts from being opened using stolen personal information.
• Request free credit reports at AnnualCreditReport.com and review them carefully for any accounts or inquiries that look unfamiliar.
• Monitor financial accounts and statements for unauthorized transactions or suspicious activity, and report anything unusual to the relevant financial institution right away.
• Be cautious of phishing attempts that reference Ailco, Kaaj Technologies or this data breach by name, as scammers sometimes use breach notifications to trick people into sharing more personal information.
• Report suspected identity theft to the Federal Trade Commission at identitytheft.gov or by calling 1-877-438-4338, and file a police report if any fraud is discovered.
• Learn about additional protections by reviewing Fair Credit Reporting Act rights or by contacting the attorney general in Maryland, New York or North Carolina for state-specific resources.