Boston Capital Holdings LP

An intruder reached Boston Capital Holdings' files through its cloud services on or about January 16, 2026, and the firm only began reviewing a claim of unauthorized access on February 12. Personal information for about 16,000 people may have been taken, though no story or disclosure names the data, the service, or the flaw. LeakNet claims responsibility; neither the company nor regulators have confirmed it. The cloud was the perimeter, and nearly four weeks passed before anyone checked whether it was still holding. Boston Capital Holdings blamed "sophisticated attackers" not an architecture that allowed those attackers to go unnoticed for a month.