HackingFinancial ServicesFinanceCustomer Data InvolvedIdentity (basic)LowContained

BAIN CAPITAL, LP

bd_852ea3a9b6fa72cb · schema v1 · pii pii-v2

Severity

Low

Discovered

Jul 28, 2026

Filed

Aug 1, 2026

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for BAIN CAPITAL, LP →

Bain Capital identified unauthorized access to a subset of folders in a cloud storage platform on July 28, 2026. The incident involved personal information including names. Bain Capital immediately removed unauthorized access, notified federal law enforcement, and engaged forensic investigators. The company is offering two years of credit monitoring and identity protection services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 28, 2026

Discovered

Aug 1, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: BAIN CAPITAL, LP
norm: bain capital

Name: BAIN CAPITAL, LP
norm: bain capital
Industry: Financial Servicesllm

Discovered: Jul 28, 2026
Materiality determined: —
Notification sent: Aug 27, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified federal law enforcement

During the incident: Immediately removed the unauthorized access
Notified federal law enforcement
Engaged digital forensic investigators and other experts to assist in our response
Changes made: Offering two years of free credit monitoring and identity protection services provided by IDX
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1465-bain-capital-lp/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 1, 2026
Raw hash: cc869b534339ce1819fe623094db05a45abbd9d43d0ac513ca9f235a68b02679

Reporting entityBAIN CAPITAL, LP

Victim entityBAIN CAPITAL, LP

Incidentdiscovered Jul 28, 2026

Stated responseImmediately removed the unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov