Pollard & Associates Data Breach Affects Thousands

Published

September 17, 2025

Updated

September 17, 2025

Pollard & Associates

Types of INFORMATION affected

Names
Social Security Numbers
Dates of Birth
Addresses
Government IDs
Medical Info
Financial Info

Pollard & Associates, Inc., an independent retirement plan consulting and third-party administration firm, experienced a data breach impacted thousands of individuals. On or around May 15, 2025, the company discovered suspicious activity on its network. An investigation revealed that an unauthorized actor copied files on or around April 8, 2025.

A review took place, and on July 15, 2025, it was determined that the data breach compromised sensitive personal and financial information belonging to at least 17,907 individuals. Exposed information included names, Social Security numbers and financial account information.

Pollard & Associates began notifying impacted individuals by mail on Sept. 16, 2025. The cybersecurity incident was also reported to the Maine and Vermont Attorney Generals' offices on Sept. 16 and Sept. 17, 2025.

Pollard & Associates' response

Pollard & Associates responded to the data breach by securing its systems and notifying law enforcement. In addition to required state and federal disclosures, the firm is offering impacted individuals 12 free months of IDX credit monitoring services.

If you receive a notice from the firm about this breach, you may want to:

Sign up for the free IDX credit monitoring services, provided by Pollard & Associates.
Monitor your credit reports and financial accounts for any unusual activity.
Be alert for phishing emails or phone calls that may use your exposed information.
Consider placing a fraud alert or credit freeze with major credit bureaus.

More information about the firm can be found on the Pollard & Associates website.

Protect Your Data

A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.

This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.