Porter and Company

Porter and Company had unencrypted personal information compromised around August 30, 2026, a date the filing leaves ambiguous between the breach itself and its discovery. The attorney general filing names no entry point, no actor, no record count, and no specific data types. The one architectural fact on the record is that the data sat unencrypted, readable by whoever reached it. Whatever the entry door was, nothing behind it was locked.