The Metropolitan Companies, Inc. disclosed that an unauthorized third party accessed its computer systems on April 21, 2014, potentially removing documents containing personal information. Affected data includes names, addresses, SSNs, dates of birth, education/work history, and financial information. The company removed system access, engaged forensic experts, and offered one year of identity theft protection via Kroll. Remediation included enhanced firewall protections and threat detection.