Strauss Borrelli PLLC, a leading data breach law firm, is investigating PennantPark Investment Advisors, LLC (“PennantPark”) regarding its recent data breach. The PennantPark data breach involved sensitive personal information belonging to over 3,600 individuals.
ABOUT PENNANTPARK INVESTMENT ADVISORS, LLC:
PennantPark is an investment management firm based in Florida. Established in 2007, PennantPark provides capital to middle-market companies in the form of senior secured debt, subordinated debt, and the equity investments across a range of industries, including software, healthcare, business services, consumer products, and more.2 Headquartered in Miami, Florida, PennantPark has offices in New York, Chicago, Los Angeles, Houston, Amsterdam, and Zurich, and employs around 150 people.3
WHAT HAPPENED?
Recently, PennantPark reported to the Attorney General of Maine that the sensitive personal identifiable information in its care may have been compromised. According to the breach notice, PennantPark identified an intrusion on its systems by an unauthorized third party.1 As a result, PennantPark launched an investigation to determine the nature of the incident.
Through its investigation, PennantPark confirmed that sensitive personal information in certain data files may have been accessed by an unauthorized third party between December 22, 2024, and March 7, 2025. As a result, PennantPark began a review of the data to determine what information had been impacted, as well as identify the specific individuals affected. On June 12, 2025, PennantPark completed this review. The exact type of personal information potentially exposed has not been made publicly available by PennantPark. However, according to Maine state reporting guidelines, “personal information” can include the following types of information:
- Name
- Social Security number
- Driver’s license or state identification card number
- Account number, credit card number or debit card number, if circumstances exist wherein such a number could be used without additional identifying information, access codes or passwords
- Account passwords or personal identification number or other access codes
On June 30, 2025, PennantPark began mailing data breach notification letters to impacted individuals. Based on the breach notice sent to Maine residents, PennantPark is providing affected individuals with a list of the specific types of sensitive information impacted and 24 months of complimentary credit monitoring services. A link to the form breach notification letters that PennantPark filed with the Attorney General of Maine is below.
If you received a breach notification letter from PennantPark Investment Advisors, LLC:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
