Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Oakmont Capital Holdings LLC d/b/a Oakmont Capital Services Data Breach

This file collects the dated facts on record for the Oakmont Capital Holdings LLC d/b/a Oakmont Capital Services incident. The state report is dated October 27, 2025.

Timeline

October 27, 2025Report filed in MassachusettsDate the notice was lodged with the Massachusetts Attorney General.

Case facts

Filing state: Massachusetts
Date reported: October 27, 2025
Receiving office: Massachusetts Attorney General

Case notes

On October 27, 2025, Oakmont Capital Holdings LLC, doing business as Oakmont Capital Services, submitted a report to Massachusetts regulators concerning a data security incident. Oakmont Capital Services specializes in commercial equipment finance and leasing, a sector that routinely handles a significant volume of personal information. The filing indicates that an unauthorized actor may have gained access to information within their digital environment.

While the exact nature of the breach remains unspecified, data security incidents in the financial services and equipment leasing industry often involve sophisticated cyberattacks, such as unauthorized access to databases or compromises of third-party platforms. Companies like Oakmont manage extensive financial profiles for business owners and individuals, making them repositories for sensitive personal data that requires robust protection.

The official filing does not specify the exact types of personal information that may have been exposed, nor does it provide an estimate of the number of individuals affected. Oakmont Capital Services has indicated that an investigation is ongoing to fully assess the extent and impact of this security incident.

Individuals who receive a direct notification letter from Oakmont Capital Services should carefully review the information provided. It is generally advisable to remain vigilant for any suspicious account activity or unsolicited communications. Consider monitoring your financial statements and credit reports for any unauthorized transactions or inquiries.

While the specifics of this incident are still being determined by the ongoing investigation, this report serves as a public record of the breach. This documentation is based on the information filed with state regulatory bodies.

Questions about this case file

Where does the Oakmont Capital Holdings LLC d/b/a Oakmont Capital Services case file come from?: Every entry is taken from the breach report Oakmont Capital Holdings LLC d/b/a Oakmont Capital Services lodged with the Massachusetts Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Massachusetts data breaches

Named in the Oakmont Capital Holdings LLC d/b/a Oakmont Capital Services breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Massachusetts case files