On November 4, 2025, illumifin Corporation identified unusual network activity and contained unauthorized access. An investigation determined an unauthorized person accessed the network and acquired copies of files containing client information. The company engaged forensic investigators, notified law enforcement, and implemented additional safeguards. Affected individuals were notified in February 2026.