Cardinal Services, Inc, Cardinal Employer Organization, and Preferred Employer Solutions, collectively (“Cardinal”) data breach

Clerk's notes

On May 20, 2026, Cardinal Services, Inc., Cardinal Employer Organization, and Preferred Employer Solutions—collectively referred to as Cardinal—filed a data security incident report with the Maine Attorney General's office. Cardinal, which operates as a professional employer organization (PEO), serves as a central hub for countless businesses by managing critical administrative functions such as payroll, employee benefits, and human resources. The report indicated an unspecified breach had occurred, compromising sensitive information under their management.

The reported exposed data categories are comprehensive and deeply personal. They include individuals' Full Name, Social Security Number, Date of Birth, Wage and Compensation Information, Tax Return Information, Direct Deposit Account Details, Home Address, and Employee ID Number. This wide array of compromised data suggests a significant risk of misuse for those affected.

Such an extensive exposure of personal and financial information can lead to severe and lasting consequences. Individuals may face an elevated risk of identity theft, which can manifest in fraudulent credit accounts being opened in their name. The compromise of Wage and Compensation Information and Tax Return Information also significantly increases the threat of fraudulent tax filings designed to intercept refunds.

Furthermore, the exposure of Direct Deposit Account Details and Home Address creates an immediate danger of unauthorized financial transactions and potential targeting for other forms of fraud. As a PEO and payroll processor, Cardinal had strict legal obligations to implement robust security measures to protect this sensitive data. The investigation into this incident remains in the "monitoring" stage.

If you have received an official data breach notification letter from Cardinal, it confirms that your confidential information was compromised due to this incident. Receiving this notification is an important step as it establishes a basis for understanding your potential legal standing. You may request a free case review to explore your options, and there are no out-of-pocket costs for this initial assessment.

If a notification letter about this breach reached you, see every Maine data breach on file or browse all cases.