AllTrust Data Breach Details
On February 14, 2024, AllTrust detected unusual activity on Aspire’s non-production computer network. Internal security teams identified an in-progress file transfer, which they interrupted before completion. Aspire immediately took steps to secure the network and engaged third-party cybersecurity and forensic specialists to investigate.
The investigation revealed that an unauthorized actor accessed the network between February 12 and February 15, 2024, during which time certain files were taken. However, it was not possible to confirm exactly which files were accessed or exfiltrated. While Aspire believes its swift actions minimized the impact, the company conducted a comprehensive review to assess what data may have been compromised.
On February 26, 2025, an analysis of the National Change of Address (NCOA) database confirmed that at least 188 Maine residents were among those impacted.
Additionally, AllTrust is offering 12 months of complimentary credit monitoring services through IDX, a ZeroFox company, for affected individuals. The company is also advising individuals on how to place fraud alerts and security freezes on their credit files, monitor financial statements, and report any signs of identity theft to law enforcement, state attorneys general, and the Federal Trade Commission (FTC).
What Information Was Compromised?
The review determined that certain individuals’ personal information was present on the affected system, including:
- Full name
- Social Security number
- Driver’s license number
- Financial account information