Amicus Solutions

Amicus Solutions, Inc. disclosed a cybersecurity incident occurring between September 1-30, 2025, involving unauthorized access to its network. The attacker exploited a vulnerability in a public-facing application to steal valid credentials and access customer data, including names, addresses, SSNs, driver's license numbers, and financial account information. Approximately 10,000 Massachusetts residents were affected. Amicus engaged Mandiant for forensic investigation, notified the FBI, reset credentials, and offered 12 months of credit monitoring via Experian. The incident is currently contained.