Boston Capital Holdings Data Breach Impacts 18k+ Individuals

Published
May 19, 2026
Updated
October 26, 2026
Boston Capital Holdings Data Breach Impacts 18k+ Individuals
Boston Capital

Boston Capital Holdings LP, a Boston-based real estate holding company, disclosed a data breach involving unauthorized access to files on its computer network in January 2026, that impacted over 18,000 people.

On Feb. 12, 2026, Boston Capital began reviewing a claim involving potential unauthorized access to certain files on its computer network.

The unauthorized individual gained control of other legitimate companies' cloud systems and used those to bypass Boston Capital's cybersecurity tools and permissions.

Through this unauthorized access, the attacker copied certain files from the company's computer network over a seven-day period from Jan. 16 through Jan. 22, 2026.

Following the breach, the company began a detailed review of the accessed files to determine their contents and identify affected individuals.

The types of personal information exposed varied by individual but included names, Social Security numbers, driver's license numbers, passport numbers, other government identification numbers and financial account information without codes to access those accounts.

The company posted a notice about the incident on its website on March 17, 2026, and began sending written notifications to affected consumers on May 18, 2026.

Other state impacts include 18,542 Texas residents, 1,355 Washington residents, 799 Indiana residents, 739 Iowa residents, 681 Massachusetts residents, 411 New Hampshire, residents, 132 Maine residents, 55 Montana residents and 150, previously 33, Vermont residents.

Boston Capital Holdings' response

The company is offering affected individuals 12 months of free credit monitoring through Cyberscout, a TransUnion company. The monitoring package includes single bureau credit monitoring, a credit report, a credit score and proactive fraud assistance.

Affected individuals must enroll within 90 days of receiving their notification letter by visiting the Cyberscout enrollment page and entering the unique code provided in their letter.

Individuals with questions can contact Boston Capital's toll-free assistance line at 1-833-877-7029, available Monday through Friday from 8:00 a.m. to 8:00 p.m. Eastern Time, excluding U.S. holidays. They may also write to Boston Capital Holdings LP, Attn: Legal Department, 11 Beacon St., Ste. 325, Boston, MA 02108.

Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info
  • Affected information types not yet disclosed

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

Affected Entity
Boston Capital
Consumers Notification date
May 18, 2026; September 17, 2026
Date of Breach
January 16, 2026 - January 22, 2026
Breach Discovered Date
February 12, 2026
Total People Affected
16874
Information Types Exposed
  • Name of individual
  • Social Security Number Information
  • Driver’s License number
  • Government-issued ID number (e.g. passport, state ID card)
  • Taxpayer identification number
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image