Bain Capital Data Breach Exposes Personal and Financial Information

Bain Capital LP, a Boston-based private investment firm founded in 1984 by partners from Bain & Company, disclosed a data breach after identifying unauthorized access to a cloud storage platform used by the company.

The breach was reported to the Massachusetts Office of Consumer Affairs and Business Regulation on Sept. 1, 2026. Bain Capital additionally mailed notifications to affected individuals.

Bain Capital identified unauthorized access to company resources on July 28, 2026. Specifically, the unauthorized access involved a subset of folders within a cloud storage platform utilized by the firm.

A review of the incident determined that the compromised folders contained personal information belonging to a limited group of people. The types of personal information exposed in the breach included names, Social Security numbers and financial account information.

According to the notification letter, no Bain Capital products, services or operations were impacted in any way by the incident. The breach was confined to certain folders within the cloud storage environment and did not affect the firm's broader investment or operational activities.

Bain Capital's response to the breach

Bain Capital is providing affected individuals with two years of free credit monitoring and identity protection services through IDX. The IDX services include several forms of protection. To enroll in the IDX services, affected individuals should visit the IDX enrollment page and enter the personal enrollment code included in their notification letter. The deadline to enroll is Nov. 27, 2026.

Individuals with questions about the incident can contact Bain Capital Investor Relations at 617-516-2350, by email at ir@baincapital.com, or by mail at 200 Clarendon St., Boston, MA 02116.