First National Holdings Breach Affects 34,508 People

First National Holdings LLC, a Chicago-based company that purchases, services and finances delinquent property tax liens, recently disclosed a data breach affecting tens of thousands of individuals.

The breach was reported to the Vermont Attorney General on July 9, 2026, and to the Texas Attorney General on July 10, 2026. According to those filings, 34,507 Texas residents and one Vermont resident were affected.

The filings submitted to state attorneys general identify the categories of personal information that were exposed in the breach.

The types of information included names, Social Security numbers, driver's license numbers, financial information (such as account numbers and credit or debit card numbers), health insurance information and additional data categorized as other information. The filings did not describe what the "other" category specifically includes.

This combination of exposed data is broad and covers several categories of highly sensitive personal information. Social Security numbers are permanent identifiers that are very difficult to change once they are compromised, making them one of the most critical types of data in identity theft situations.

Driver's license numbers are commonly used for identity verification by banks, government agencies and other organizations, and their exposure can make it easier for someone to pose as an affected individual.

First National Holdings' response

First National Holdings is notifying affected individuals by U.S. Mail, according to disclosures filed with state attorneys general. These notification letters are the primary way consumers will learn whether their personal information was involved in the breach and what steps they should take in response. Consumers should allow time for the letters to arrive by mail and should not discard any correspondence from the company related to this incident.

Because the breach involved several categories of highly sensitive personal information, consumers who receive a letter from the company should read it carefully and follow any instructions it provides. Any details about protective services being offered by the company would be included in the notification letter.

Individuals who believe they may be affected by this breach, particularly those who have had dealings with First National Holdings or its related entities in connection with delinquent property tax obligations, should watch for mail from the company in the coming days and weeks. Acting promptly to protect personal and financial information is important given the sensitive nature of the data involved in this incident.