







On Nov. 19, 2025, Byzfunder NY, a non-bank alternative lender for small and medium-sized businesses, disclosed a significant cybersecurity incident between September 1, 2025, and September 20, 2025. An investigation revealed that personally identifiable information (PII) of at least 15,164 individuals were compromised.
The incident was first detected on Sept. 19, 2025, when Byzfunder identified suspicious activity within one of its cloud software solutions. The company immediately launched an investigation and engaged cybersecurity specialists to assist with the response.
On Nov. 12, 2025, Byzfunder confirmed that personal information belonging to thousands of individuals had potentially been compromised. The incident impacted at least 226 residents in Massachusetts, and 32 in Maine, with the total number of affected people potentially higher.
The types of information exposed in this incident may include names, dates of birth, addresses and Social Security numbers. The exposure of PII is considered severe, as it can lead to identity theft, financial fraud and other privacy risks for those affected.
The data breach was disclosed to the California, Maine and Massachusetts Attorney Generals' offices on Nov. 19, 2025, and the Vermont Attorney General on Nov. 20, 2025.
In response to the breach, Byzfunder promptly investigated the incident, assessed the security of its systems and email environment, and worked to identify all individuals whose information may have been affected. On Nov. 19, 2025 the company began notifying customers with information about which individuals may have been impacted.
If you receive notification from Byzfunder or your provider about this breach, you may want to:
For affected individuals with questions, Byzfunder has set up a call center at 833-781-8320, Monday through Friday, 9 a.m. to 9 p.m. ET.

.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)