The security failure reportedly occurred on July 31, 2026, though specific details regarding the nature of the breach remain undisclosed by the company. According to preliminary reports, the exposed data potentially includes sensitive personal identifiers such as Social Security numbers, financial account details, and medical information. Aprio Advisory Group began notifying affected individuals by mail on or about September 21, 2026.

Edelson Lechtzin LLP is now offering free case evaluations to determine if affected parties can pursue legal remedies for losses related to the exposure, including out-of-pocket costs and compromised privacy. The firm suggests that those who received notification should preserve all correspondence, monitor credit reports for suspicious activity, and consider placing security freezes with major credit bureaus to mitigate the risk of fraud.