Industrial Acceptance Data Breach Affects 79,216 Individuals

Industrial Acceptance Corp., a consumer finance company based in New Haven, Connecticut, disclosed a data breach that affected approximately 79,216 individuals in the United States, including 226 residents of Maine.

The breach involved an attack on IAC's computer network carried out by INC, a ransomware group.

On or around March 4, 2025, approximately one week after the breach was first discovered, IAC confirmed that the unauthorized actor had removed files from its network. The company then launched a detailed review of the compromised files to determine what personal information they contained and which specific individuals were affected by the data exposure.

The review completed on May 11, 2026, more than 14 months after the breach was first detected. IAC began notifying affected consumers on May 28, 2026.

The types of personal information exposed in the breach included names, Social Security numbers and driver's license numbers.

Industrial Acceptance Corp.'s response to the breach

IAC is offering 12 months of complimentary credit monitoring and identity protection services through Cyberscout, a TransUnion company. To activate the services, affected individuals should visit Cyberscout's enrollment page and enter the unique code provided in their notification letter. Enrollment must be completed within 90 days of the date of the letter.

Individuals with questions or concerns about the incident can contact IAC's dedicated assistance line at 1-844-593-8423 (toll free). Representatives are available Monday through Friday from 8:00 a.m. to 8:00 p.m. Eastern Time, excluding major U.S. holidays. The call center will remain available for 90 days from the date of the notification letter.

Affected individuals may also contact IAC by mail at 138 Orange St., New Haven, CT 06510.