**Canary Benefits Data Breach Exposes Sensitive PII in Undisclosed Incident**
A data breach at Canary Benefits Inc., a New York City-based fintech company, has compromised the personally identifiable information (PII) of an unspecified number of individuals. The breach was reported to the Massachusetts Attorney General’s office on December 17, 2025, though details about the cause, method, or responsible parties remain undisclosed.
The exposed data includes names and Social Security numbers, heightening risks of identity theft. Canary Benefits has not provided further information on how the unauthorized access occurred.
In response, the company is offering 24 months of complimentary identity protection services through Cyberscout (a TransUnion company), including credit monitoring, credit report access, and credit score tracking. Affected individuals will receive enrollment instructions with a unique activation code.
A dedicated call center (800-405-6108) has been established for inquiries, operating Monday through Friday, 8 a.m. to 8 p.m. ET. The full scope of the breach and its impact on affected parties are still under review.
Source: https://www.claimdepot.com/data-breach/canary-benefits-2025
Canary cybersecurity rating report: https://www.rankiteo.com/company/canaryfinancial
"id": "CAN1766008718",
"linkid": "canaryfinancial",
"type": "Breach",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Financial Services',
'location': 'New York City, USA',
'name': 'Canary Benefits Inc.',
'type': 'Fintech Company'}],
'customer_advisories': 'Call center at 800-405-6108, Monday through Friday, 8 '
'a.m. to 8 p.m. ET',
'data_breach': {'personally_identifiable_information': ['First and last names',
'Social Security '
'numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personally identifiable '
'information (PII)'},
'date_publicly_disclosed': '2025-12-17',
'description': 'A recent data breach at Canary Benefits Inc. has exposed '
'personally identifiable information (PII) of an unknown '
'number of individuals. The breach may have exposed sensitive '
'personal information, including first and last names and '
'Social Security numbers.',
'impact': {'data_compromised': 'Personally identifiable information (PII), '
'including first and last names and Social '
'Security numbers',
'identity_theft_risk': 'High'},
'recommendations': ['Sign up for free Cyberscout credit monitoring services',
'Monitor credit reports and financial accounts for '
'unusual activity',
'Be alert for phishing emails or phone calls',
'Consider placing a fraud alert or credit freeze with '
'major credit bureaus'],
'references': [{'source': 'Massachusetts Attorney General’s office'}],
'regulatory_compliance': {'regulatory_notifications': ['Massachusetts '
'Attorney General’s '
'office']},
'response': {'communication_strategy': 'Official notice to affected '
'individuals, call center setup',
'third_party_assistance': 'Cyberscout (TransUnion)'},
'title': 'Canary Benefits Data Breach Exposing PII',
'type': 'Data Breach'}