Where does the Penquis CAP case file come from?

Every entry is taken from the breach report Penquis CAP lodged with the Indiana Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Penquis CAP Data Breach

This file collects the dated facts on record for the Penquis CAP incident. The state report is dated October 5, 2026. The incident itself is dated December 11, 2025.

Timeline

298 days separate the incident date from the date it was reported.

December 11, 2025Incident dateWhen the filing says the breach took place.
October 5, 2026Report filed in IndianaDate the notice was lodged with the Indiana Attorney General.

Case facts

Filing state: Indiana
Date reported: October 5, 2026
Incident date: December 11, 2025
Receiving office: Indiana Attorney General

Case notes

Penquis CAP has reported a data security incident that occurred on December 11, 2025. The official notification regarding this event was filed on October 5, 2026, according to publicly available records.

The specifics concerning the type of breach and the categories of personal information involved have not been detailed in the public filings. Organizations typically issue these notifications to comply with regulations and to inform individuals whose data may have been compromised.

At present, the status of the breach investigation is listed as 'monitoring.' This indicates that the situation is still being actively assessed or overseen, though no further details about the ongoing efforts are publicly available.

Individuals who believe they may be affected by this Penquis CAP incident should exercise caution. It is always prudent to regularly review statements from financial institutions and any other accounts for unfamiliar activity.

Consider enabling multi-factor authentication on online accounts wherever possible, as this adds an extra layer of security. Additionally, be wary of unsolicited communications, such as emails or calls, that request personal details, and verify their legitimacy independently before responding.

Questions about this case file

Where does the Penquis CAP case file come from?: Every entry is taken from the breach report Penquis CAP lodged with the Indiana Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Indiana data breaches

Filing source: Indiana Attorney General

Named in the Penquis CAP breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Indiana case files