Accela Data Breach

Accela, Inc., a California-based provider of cloud-based software used by more than 900 government agencies nationwide for permitting, licensing, and code enforcement, has notified individuals that a security incident involving one of its file transfer systems may have exposed their personal information. Because Accela’s platform is used by government agencies to process resident transactions, a breach of this kind can affect people who never directly did business with the company itself, only with the local government office that uses its software.

Accela’s Data Breach Investigation

According to a notice sent on Accela’s behalf, the company concluded an investigation into an incident involving unauthorized access to one of its secure file transfer portals. Accela determined that an unauthorized actor accessed the portal and acquired copies of certain files between December 11 and December 12, 2025. The notice explains that the incident involved only Accela’s own computer systems and that the government agency client’s own systems were not affected. Accela has stated that one or more of the affected files contained the recipient’s personal information, though the notification letter reviewed does not specify the exact data elements for every individual, since that portion of the template letter is customized per recipient before mailing.

Data security incidents involving software vendors that serve government agencies carry particular risk because a single point of failure can affect residents across many different jurisdictions who submitted information for routine matters like permits, licenses, or code enforcement complaints. This type of vendor-side breach, sometimes called a supply-chain or business-associate incident, has become increasingly common as more government functions move to third-party cloud platforms. When a vendor holding this kind of aggregated data is compromised, the exposed information can include names, addresses, dates of birth, and other government-issued identification numbers submitted as part of ordinary civic transactions, which can be used by criminals for identity theft or fraudulent account openings.

Accela has arranged one year of complimentary identity monitoring services through Kroll for individuals affected by this incident, and has stated it has taken additional steps to enhance the security of its file transfer portal following the discovery of the intrusion. As is common with vendor-side incidents like this one, the notification letters were mailed individually to each affected person with a specific description of the categories of information at risk for that individual.

When Did This Breach Occur?

Accela’s investigation determined that an unauthorized actor accessed its secure file transfer portal and acquired copies of certain files between December 11 and December 12, 2025. Affected individuals were subsequently notified by mail.

What Information Was Breached?

Accela has stated that one or more of the affected files contained the notified individual’s personal information. The company’s notification letter does not publicly specify a single universal list of data types affected across all individuals, since the specific categories are customized for each recipient in the mailed notice.

What You Can Do

If you received a notice from Accela or believe you may have been affected, consider taking the following steps:

• Enroll in the complimentary identity monitoring services offered through Kroll before the stated deadline.
• Monitor your financial accounts and credit reports for unfamiliar activity.
• Consider placing a fraud alert or credit freeze with the major credit bureaus.
• Be cautious of phishing attempts referencing this incident or any government agency you have interacted with.
• Request a free copy of your credit report at annualcreditreport.com to check for suspicious activity.

File a Data Breach Lawsuit Against Accela

If you received a data breach notification from Accela or believe your personal information may have been compromised through a government agency’s use of Accela’s software, you may be entitled to compensation. Companies that maintain sensitive personal information on behalf of government clients are expected to secure that data properly, and affected individuals often bear the burden of the resulting fraud risk.

Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.