Apple American Group data breach: employee information taken in April 2026

Why did I get a letter from Apple American Group?

The letter is about employment records. It says the information may have been affected if you gave it to the company during your employment. So the letters go to people who work or worked for the company. The specific items are filled in for each reader.

What happened at Apple American Group?

The company says it secured its systems, investigated, and then reviewed the files involved to find whose information they held. It says there is no indication of identity theft or fraud.

Date	What the letter and the regulators' records say
April 8 to 9, 2026	Servers accessed and files accessed or acquired
April 9, 2026	The company becomes aware of suspicious network activity
August 18, 2026	Letter date; recorded by California, Washington, Indiana and Massachusetts

Letters went out 131 days after the company found the activity.

What information was involved?

The state records give the categories:

Regulator	Information it records
Washington attorney general	Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Military ID Number; Passport Number; Health Insurance Policy or ID Number; Medical Information; Biometric Data; Username and Password/Security Question Answers; Email Address and Password/Security Question Answers
Massachusetts consumer affairs office	Social Security numbers, financial accounts, driver's licenses and payment cards marked as breached; medical records not

How many people were affected?

Regulator	What it counts	Number
Indiana attorney general	Total affected	282,573
Washington attorney general	Washingtonians	20,653
Indiana attorney general	Indiana residents	20,215
Massachusetts consumer affairs office	Massachusetts residents	16,241

The letter's Rhode Island section adds about 4,954 Rhode Island residents.

Did other American Group companies report a breach on the same dates?

Yes. Five other companies with "American Group" in their names gave Indiana's attorney general the same breach date, April 8, 2026, and notified people between August 20 and September 1, 2026. Indiana's report lists the six as follows, largest total first. Washington's list, fetched on November 10, 2026, has rows for three of them, each with the same April 8 breach date. Texas's list has a row for one: HUT American Group, with 3,528 Texans, published on August 21, 2026. Massachusetts's 2026 list has filings from all five: 36 residents for HUT American Group, 10 for Pan American Group, and 4 each for Bell, RB and Wend American Group.

Company as Indiana lists it	Notice sent	Indiana residents	People affected in total	Washington residents
Apple American Group LLC	Aug 18, 2026	20,215	282,573	20,653
HUT American Group LLC	Aug 20, 2026	462	135,007	—
Bell American Group LLC	Aug 26, 2026	43,885	115,346	—
RB American Group LLC	Aug 28, 2026	24	66,608	974
Pan American Group LLC	Aug 24, 2026	6	55,215	12,309
Wend American Group LLC	Sep 1, 2026	2,695	45,264	—

The six totals add up to 700,013. Each is that company's own count, so a person who worked for two of the companies could be in both. Bell American Group's row has the most Indiana residents of the six: 43,885, more than twice Apple American Group's 20,215.

Pan American Group's letter, filed with California's attorney general and dated August 24, 2026, gives the same account as Apple American Group's. It says the company became aware of suspicious network activity on April 9, 2026. It says an unknown actor accessed some servers between April 8 and April 9, 2026, and accessed or acquired files during that time. Its letter also concerns information given during employment. Its offer is shorter: twelve months of CyberScout monitoring, against Apple American Group's twenty-four.

No document fetched for this entry says whether the six companies share an owner, shared systems, or were hit in one incident. The matching dates and the matching wording are what the records show. If your letter came from HUT, Bell, RB, Pan or Wend American Group, the dates above are the ones Indiana recorded for it, and the steps in this entry apply the same way.

What is Apple American Group offering?

Twenty-four months of credit monitoring and identity theft protection through CyberScout, a TransUnion company, at no cost. People must activate it themselves.

Item	Detail from the letter
Provider	CyberScout (TransUnion)
Length	24 months
Help line	Number printed on each letter; Monday to Friday, 8 a.m. to 8 p.m. EST, excluding U.S. holidays

What the documents leave open

• How the actor got in.
• Which jobs and locations the employment records cover.
• Whether the 282,573 counted by Indiana are all current and former employees.
• Whether the five other American Group notices with the same April 8, 2026 breach date describe the same incident.