Haley's Metal Shop Data Breach Lawsuit Investigation

If you received a data breach notice from Haley's Metal Shop, important personal information may have been exposed. Review the confirmed facts below and learn how to safeguard your identity and explore your legal options.

Incident Overview

Haley's Metal Shop, Inc. (Haley's Metal Shop) detected an email-phishing incident involving a single employee mailbox on December 1, 2025. An investigation confirmed that an unauthorized actor accessed the account on that same day. Internal review completed on January 23, 2026 revealed that emails or attachments contained sensitive personal data for certain individuals.

What Data Was Impacted?

  • Name

  • Social Security number

  • Driver’s license number

  • Financial account information

The Maine Attorney General filing indicates 54 Maine residents were notified of the breach.

Timeline of Key Events

  • December 1, 2025 – Unauthorized access to employee email account detected and secured.

  • January 23, 2026 – Data review confirmed presence of personal information.

  • February 6, 2026 – Consumer notification letters mailed and breach reported to the Maine Attorney General.

Company Response & Free Services

Haley's Metal Shop states it has:

  • Secured the affected email account and implemented additional email-security measures.

  • Arranged for one year of complimentary Epiq Privacy ID Solutions identity-protection services for impacted individuals.

Recommended Next Steps for Affected Individuals

The notification letter encourages recipients to:

  • Activate the free Epiq Privacy ID Solutions membership.

  • Monitor bank, credit-card and other financial statements for unauthorized activity.

  • Obtain free annual credit reports at annualcreditreport.com or 1-877-322-8228.

  • Consider placing a fraud alert or security freeze with Equifax, Experian and TransUnion.

  • Report suspected identity theft to the Federal Trade Commission via identitytheft.gov or 1-877-IDTHEFT.

  • File a police report if you believe you are a victim of identity theft.

Company Overview

Founded in 1917, Haley's Metal Shop is a Biddeford, Maine-based construction and HVAC contractor.

  • Website: haleysmetal.com

  • Headquarters: 539 Elm Street, Biddeford, ME 04005, USA

  • Phone: (201) 284-8571

  • Industry: Construction / HVAC

  • Employees: 55

  • Facebook: @haleysmetal

Sources

Impacted Entities

Frequently Asked Questions

I received a data breach letter from Haley's Metal Shop — what should I do?

Follow the activation instructions for the free Epiq Privacy ID Solutions service, review your financial accounts and credit reports, and consider placing a fraud alert or security freeze.

How do I submit a claim related to the Haley's Metal Shop data breach?

Keep your notification letter and any evidence of fraud. Then consult a qualified data-privacy attorney or consumer-rights group to discuss potential legal remedies.

What information did the Haley's Metal Shop breach expose?

Names combined with Social Security numbers, driver’s license numbers and/or financial account details.

Did Haley's Metal Shop offer credit monitoring, and for how long?

Yes. Impacted individuals are eligible for one year of complimentary identity-protection services through Epiq Privacy ID Solutions.

How many people were affected by the Haley's Metal Shop breach?

The Maine filing lists 54 affected residents.

How can I get the official breach notice (PDF) for Haley's Metal Shop?

You can download it directly from the Maine Attorney General website using the button above.

This article is for informational purposes only and does not constitute legal advice.

Attorney Advertising. Prior results do not guarantee a similar outcome.

Previous
Previous

Sun Communities Data Breach Lawsuit Investigation

Next
Next

Cottage Hospital Data Breach Lawsuit Investigation