Pan American Group LLC discovered in April 2026 that an unknown actor accessed company servers and obtained files containing employee personal information. The company notified affected current and former employees in August 2026. Anyone who receives a letter should enroll in the free CyberScout credit monitoring within 90 days and watch closely for phishing attempts.
| Company | Pan American Group LLC |
|---|---|
| Industry | Other Commercial |
| Data Types Exposed | Full Names, Employment-Related Personal Information, Identity Verification Information, Financial or Social Security-Related Details |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unauthorized Network Access |
| Regulators Notified | California Attorney General |
What Happened in the Pan American Group LLC Data Breach?
Pan American Group LLC has begun notifying individuals about a data security event that exposed personal information tied to their employment. The company detected suspicious activity on its network and moved quickly to lock down its systems. As a result, it also launched an investigation to understand exactly what had occurred.
That investigation found that unauthorized access to its network occurred in April 2026. Specifically, an unknown actor accessed certain company servers between April 8 and April 9, 2026. During that short window, the intruder accessed or acquired files stored on those systems.
After containing the intrusion, Pan American Group LLC reviewed the affected files line by line. This step was necessary to determine what information the files actually contained and which individuals it belonged to. Because this review takes time, the company did not confirm that employee data was involved until later. The notification letters sent in August 2026 reflect the conclusion of that process.
Who was affected?
Pan American Group LLC has indicated that the exposed information relates to individuals who provided personal details during the course of their employment. This suggests the breach primarily affects current and former employees rather than customers or clients. Anyone who submitted personal records to the company as part of hiring, payroll, or benefits administration could be included.
The exact number of people affected by this incident has not been publicly disclosed. Consequently, individuals should not assume they were unaffected simply because they have not yet received a notice. If a letter arrives, it means the company has confirmed your specific information was present in the compromised files.
Because the breach involves employment records, the geographic scope may extend beyond a single office or state. Employees who worked remotely or across multiple locations could also be part of the notified group. The company has not specified whether minors were among those affected, though this is generally uncommon in employment-related data sets.
What Information Was Potentially Exposed?
Pan American Group LLC has not published a single itemized list of every data element involved for public reference. However, the notification indicates that the exposed files may include sensitive categories tied to employment. The company has offered credit monitoring and identity theft protection, which typically signals that financial or identity-related data was part of the exposure.
- Full names
- Employment-related personal information
- Information potentially tied to identity verification
- Data that could support credit monitoring enrollment, suggesting financial or Social Security-related details
When employment files are exposed, the risk of identity theft rises considerably. This is because personnel records often combine names with sensitive identifiers used to open new accounts. Fraudsters can use this combination to apply for credit, file fraudulent tax returns, or access existing financial accounts.
In addition, stolen employment data can fuel convincing phishing attempts. Scammers often reference a person’s employer or job history to make fraudulent emails and calls seem legitimate. As a result, affected individuals should treat unexpected messages referencing their employment with extra caution, even months after the breach.
What is the company doing?
Once it discovered the suspicious activity, Pan American Group LLC took immediate steps to secure its network. The company also began a formal investigation to determine the scope of the intrusion and identify who was affected. This process included a detailed review of the accessed files before any notifications went out.
Beyond containment, the company says it has enhanced its existing data protection safeguards. It also continues to monitor those safeguards as part of its ongoing security efforts. In response to the incident, Pan American Group LLC is offering twelve months of complimentary credit monitoring and identity theft protection through CyberScout, a TransUnion company. The company also filed a formal notification with the California Attorney General, as required under state law.
Affected individuals must enroll in the monitoring services within 90 days of the notification letter date. Enrollment requires an internet connection and a valid email address, and the offer is not available to minors under 18. Because activation requires individual action, recipients should not assume they are automatically covered.
What Should Affected Individuals Do?
Enroll in the Free Monitoring Services
Anyone who received a notification letter should enroll in the complimentary credit monitoring and identity theft protection offered by the company. This service, provided through CyberScout, can help detect suspicious activity early. Acting quickly matters because the enrollment window is limited to 90 days from the letter’s date.
To sign up, visit the enrollment portal listed in your letter and enter the unique code provided to you. If you misplace your letter or code, contact the dedicated assistance line included in your notification for help. Because this service is free, there is little downside to enrolling right away.
Watch for Fraud and Consider a Credit Freeze
Given that employment-related identity information may have been exposed, affected individuals should consider placing a fraud alert or credit freeze with the three major credit bureaus. A freeze restricts new accounts from being opened in your name without your explicit approval. This is one of the strongest protections available against identity theft.
Fraud alerts are less restrictive but still notify lenders to verify your identity before extending credit. Either option is free to set up and can be lifted later if needed. For ongoing protection, review your credit reports periodically for accounts or inquiries you do not recognize.
Stay Alert for Phishing Attempts
Because attackers often use stolen personal data to craft convincing scams, affected individuals should be cautious with unexpected emails, texts, or phone calls. Be especially wary of messages referencing your former or current employer, since this breach involved employment records. Never click links or share information without verifying the sender first.
If a message claims to be from Pan American Group LLC or a related service like CyberScout, confirm its legitimacy through official contact channels rather than replying directly. Legitimate companies rarely ask for sensitive information over email. When in doubt, delete the message and contact the company directly using verified contact details.
Report Suspicious Activity Promptly
If you notice unfamiliar accounts, credit inquiries, or other signs of misuse, report them immediately. You can file a complaint with the Federal Trade Commission at identitytheft.gov or by phone. In addition, consumers have the right to file a police report if they experience identity theft or fraud tied to this incident.
Keeping records of any suspicious activity strengthens your case if you need to dispute fraudulent charges later. It also helps if you decide to consult a data breach attorney about your legal options. An attorney can help you understand whether you qualify for compensation related to this incident.
More Information
Official data breach notification from California Attorney General