About BTU International
BTU International, a commercial entity based in Westford, MA, experienced a data breach that impacted a total of 373 individuals, including 2 residents of Maine. The breach was a result of an external system hacking incident that occurred on August 11, 2025, and was discovered on October 27, 2025. The breach involved unauthorized access to personal information, including names and other personal identifiers.
What Happened
We detected unauthorized activity in our information technology (IT) systems. Upon discovering this activity, we immediately took protective actions to stop the unauthorized access, notified U.S. federal law enforcement, and launched an investigation with the assistance of leading cybersecurity specialists. The investigation indicated that some of your personal information may have been accessed by an unauthorized party in August 2025. At this time, we have no reason to believe your information has been misused; however, we are providing you notice out of an abundance of caution.
The breach involved unauthorized access to BTU International’s IT systems in a ransomware attack on August 11, 2025. Personal information of 373 individuals, including Maine residents, was potentially accessed.
Next Steps
Affected users should remain vigilant by monitoring their account statements and credit reports for any suspicious activity. BTU International has taken immediate protective actions, including notifying federal law enforcement and engaging cybersecurity specialists to investigate and secure their systems. Users are advised to take advantage of the complimentary credit monitoring services provided. BTU International is committed to enhancing its security measures to prevent future incidents.
Identity Theft Protection Services
BTU International is offering 12 months of complimentary credit monitoring and protection services through Cyberscout at no cost to the affected individuals. The services include alerts for changes to credit files, proactive fraud assistance, and support in case of identity fraud. Affected individuals are encouraged to enroll in these services within 90 days of notification to benefit from the protections offered. Additionally, users can place fraud alerts and security freezes on their credit reports for added security.