SSL and ACL Affiliates Report 2025 Data Security Incident
SSL and ACL and their current and former affiliates have reported a data security incident impacting personal information that occurred on April 7, 2025. This incident was filed with California regulators on December 30, 2025, and an investigation into the scope and impact of the event is ongoing. Individuals who received notification should review the information provided to understand the potential implications.
- State
- CA
- Breach date
- April 7, 2025
- Reported
- December 30, 2025
On December 30, 2025, SSL and ACL and their current and former affiliates filed a data security incident report concerning an event that occurred on April 7, 2025. This filing, submitted to California regulators, indicates an ongoing investigation into the specifics of the compromise affecting personal information.
While the exact nature of the security incident and the specific categories of personal information involved have not been detailed in the public filing, the report confirms that individuals' data was potentially impacted. The investigation is continuing to ascertain the full scope and implications of the breach for affected individuals.
Recipients of a notification letter related to this incident should carefully read the document for specific details pertaining to their situation. The company is expected to provide further information directly to those whose information was compromised.
As a general precaution following any data security event, individuals are advised to remain vigilant against suspicious communications. Consider monitoring financial accounts and credit reports for unauthorized activity. It is also a good practice to update passwords for important online services, especially if they were reused across multiple platforms.
This case file is based on the official public filing made by SSL and ACL and their current and former affiliates with regulatory bodies in California. The 'investigating' status indicates that details may evolve as the full scope of the incident is determined.
What to do if you were affected
These general steps can help limit the risk of identity theft and fraud after any data breach.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Source: CA Attorney General filing