Palacios Marine & Industrial Coatings Data Breach Exposes SSNs

Palacios Marine & Industrial Coatings Inc. (PMI), a full-service general mechanical contractor based in Port Lavaca, Texas, disclosed a data breach involving unauthorized access to its computer systems. The breach has affected a total of 15,215 individuals, of which 12,227 were residents of Texas and one of Maine.

On Sept. 30, 2025, PMI detected irregular activity within its computer network. The company took steps to secure its network and launched an investigation to determine the nature and scope of the unauthorized activity.

The investigation found that on Sept. 30, 2025, an unauthorized actor gained access to certain computer systems and potentially accessed or acquired files stored on those systems.

Following this finding, PMI undertook a thorough review of the affected files to identify individuals whose personal information was contained in them. Approximately five and a half months after the initial detection of unauthorized activity, the review process recently concluded.

The types of personally identifiable information exposed in this breach included names, Social Security numbers, driver's license or state ID numbers, financial account information, usernames and passwords, passport numbers and health insurance information.

Additionally, on Nov. 11, 2025, the ransomware group Akira posted on the dark web, claiming to have obtained data from PMI.

PMI began notifying affected consumers in writing on March 30, 2026. The breach was reported to the Indiana Attorney General, to the Maine Attorney General and to the Texas Attorney General starting on March 30, 2026. The company also posted a notice of the incident on its website describing what happened and outlining protective resources for those whose data may have been compromised.

Palacios Marine & Industrial Coatings' response to the breach

To help affected individuals protect themselves, PMI is offering 12 months of complimentary identity monitoring services through Kroll, a global risk mitigation firm.

Affected individuals who wish to enroll must visit the enrollment website and enter the unique membership number included in their notification letter before the deadline specified in that letter.

In addition to the monitoring services, PMI is providing affected individuals with guidance on how to protect against identity theft and fraud.

For questions about the incident, PMI has set up a dedicated assistance line at 844-403-4522, available between 8:00 a.m. and 5:30 p.m. Central Time, excluding major U.S. holidays. Individuals may also write to the company at 2392 State Highway 35 North, Port Lavaca, TX 77979.