FloatMe

Float Me Inc. notified Massachusetts residents of a data breach occurring on December 8, 2025, where a malicious actor used credentials obtained from an unknown external source to improperly access user accounts. Affected data included login credentials, mailing addresses, phone numbers, and partial financial account details for a limited subset of consumers. The company reset passwords, blocked the actor, and cancelled fraudulent advances. MFA is recommended.

FloatMe, Corp. notified the New Hampshire Attorney General of a credential stuffing incident involving its Auth0 platform. The breach occurred December 8-9, 2025, affecting 2 New Hampshire residents. Exposed data included login credentials, mailing addresses, phone numbers, partial bank/debit card numbers, and recent financial transactions. FloatMe reset passwords, shut down the compromised endpoint, and cancelled fraudulent advances. Notifications were sent to affected individuals on January 6, 2026.

FloatMe, Corp. reported an external system breach (hacking) occurring between Dec 8-11, 2025. Malicious actors used stolen login credentials to access accounts. Affected data included credentials, mailing addresses, phone numbers, partial bank/debit card numbers, and recent financial transactions. 401 individuals affected (1 in Maine). Notifications sent Jan 6, 2026. Remediation included password resets, access termination, and MFA recommendations.

FloatMe Corp reported a data breach to the Indiana Attorney General. The breach occurred on 2025-12-08 and was reported on 2026-01-05. 7 Indiana residents were affected. 401 individuals affected in total.