About BCGL
BCGL, a commercial entity based in Lancaster, PA, experienced a data breach that affected 2,218 individuals, including 8 residents of Maine. The breach was discovered on October 24, 2025, although it initially occurred on January 4, 2025. The breach involved an external system being hacked, and sensitive information such as names, driver’s license numbers, and Social Security numbers were acquired.
What Happened
This year, BCGL identified suspicious activity in its network and promptly took measures to mitigate the risk of further activity. BCGL quickly initiated an investigation with the assistance of third-party forensic specialists to determine the nature and scope of the activity. Through the investigation, BCGL determined that an unauthorized actor gained access to and took a limited subset of data. Therefore, BCGL began a comprehensive review of the data involved to determine what information was at issue and to whom it belonged. BCGL determined that information related to Maine residents was included in the data and worked to gather contact information so that direct notice could be provided. On October 24, 2025, BCGL received sufficient information to provide direct notice to Maine residents.
BCGL experienced a breach where an unauthorized actor accessed a limited subset of data, which included information related to Maine residents. The breach was discovered on October 24, 2025.
Next Steps
BCGL is taking several steps to address the data breach and protect affected individuals. They have initiated an investigation with third-party forensic specialists and have notified federal law enforcement. BCGL is also implementing additional safeguards and employee training to prevent future incidents. Affected individuals are advised to remain vigilant for signs of identity theft and fraud by monitoring their account statements and credit reports closely.
Identity Theft Protection Services
BCGL is offering identity theft protection services to the individuals affected by the breach. Impacted individuals will receive 12 months of credit monitoring services provided by Epiq, at no cost. Additionally, BCGL is offering guidance on how to protect against identity theft, including instructions on placing fraud alerts and security freezes on credit files, obtaining free credit reports, and reporting incidents of fraud or identity theft to relevant authorities.