Archwest Funding, LLC and Archwest Lending, LLC disclosed a data security incident in Massachusetts. On May 12, 2026, Archwest identified unauthorized access to an employee email account resulting from a deceptive message (phishing) on January 23, 2026. The attacker may have viewed emails and attachments containing personal information. Archwest secured the account, terminated access, and offered 24 months of identity theft protection services to affected individuals.