AllEarth Renewables notified consumers of a security incident detected on October 7, 2025, involving unauthorized access to its business bank account system. The incident potentially exposed customer and vendor ACH payment information, including bank account numbers, routing numbers, and account holder names. No evidence of fraudulent use was found at the time of notification.