On July 8, 2025, SmartRent Technologies Inc. discovered a data breach involving the personal information of current and former employees. The breach originated not within SmartRent’s own systems, but through one of its vendors, Semple Marchal and Cooper LLP (SMC), an accounting firm responsible for auditing SmartRent’s 401k retirement savings plan.
According to the disclosure filed with the Maine Attorney General, the cybersecurity incident occurred in February 2025, when SMC’s internal share drive was compromised following a successful phishing campaign. The data breach breach went undetected until May 10, 2025, when the accounting firm discovered the unauthorized access.
The compromised share drive contained documents and supporting materials related to SmartRent’s 401k audit, including information on both participants and non-participants in the retirement plan from 2019 to 2024. Exposed information includes full name, surname, full address, Social Security number, sex, hire date, end date, employment status, date of birth and marital status.
The breach disclosed the data breach to authorities on Aug. 4, 2025, and the company began notifying affected individuals by mail on Aug. 7, 2025. The breach affected both employees who participated in the 401k plan and those who did not.
In addition to state and federal disclosures, SmartRent is offering 24 months of IDX identity protection services to impacted current and former employees.
If you receive a notice from SmartRent or Semple Marchal and Cooper LLP about this breach, you may want to:
To learn more about the company and its offerings, visit the SmartRent website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.