Hana Financial Inc., a Los Angeles-based non-bank specialty financial institution, experienced a data breach. On July 5, 2025, the ransomware group Sinobi claimed responsibility for a cyberattack. The attackers reportedly obtained sensitive company data and posted about the hack on a dark web forum on the Tor network.
The breach involved the exposure of personally identifiable information (PII). Compromised information may include names, dates of birth, Social Security numbers and financial account information.
Hana Financial began notifying affected individuals by mail on Sept. 25, 2025. The cybersecurity incident was also disclosed to the Massachusetts Attorney General's office on the same day.
In addition to required state and federal disclosures, the company is offering affected individuals 24 free months of TansUnion Cyberscout credit monitoring and identity protection services.
If you receive a notice from Hanna Financial about this breach, you may want to:
For more information about the financial company, visit the Hana Financial Inc. website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.