What happened in the First National Holdings data breach?

First National Holdings, LLC recently reported a data breach affecting 34,507 Texas residents. The Texas Attorney General published the breach report on July 10, 2026. First National Holdings also reported the breach in Vermont on July 9, 2026, where one resident was affected, and that the Vermont notice identified Social Security numbers among the information involved.

According to the Texas notice, the compromised information may have included names, Social Security numbers, driver’s license numbers, financial account or payment-card information, and health insurance information. The Texas filing also lists an unspecified category of “other” information. Not every affected person necessarily had every type of information exposed.

How did the First National Holdings breach occur?

The exact cause of the First National Holdings breach has not been publicly disclosed. A summary of the Vermont filing describes the incident as unauthorized access to sensitive personal information, but the available notices do not explain how the unauthorized party gained access. There is currently no confirmed information showing that the breach resulted from ransomware, phishing, stolen credentials, malware, a software vulnerability, or a third-party vendor. The Texas Attorney General’s registry reports the affected information and number of Texas residents but does not include the attack method.

When did the First National Holdings breach occur?

The exact date of the First National Holdings, LLC data breach has not been publicly disclosed. The available Texas and Vermont records do not state when the unauthorized activity began, when it ended, or when First National Holdings discovered it.

How many people were affected by the First National Holdings breach?

At least 34,508 people are currently known to have been affected: 34,507 Texas residents, according to the Texas Attorney General filing, and one Vermont resident. The total nationwide number has not yet been disclosed, so the breach may have affected additional people in other states.

What information was exposed in the First National Holdings breach?

• Not every affected person necessarily had every category of information compromised. Breached data reportedly may include, but is not necessarily limited to:
  • Social Security numbers
  • driver’s license numbers
  • financial account
  • payment-card data
  • health insurance data

Has First National Holdings offered free credit monitoring and/or identity theft protection services?

The publicly available Texas and Vermont breach information does not confirm that First National Holdings, LLC offered free credit monitoring or identity-theft protection services. Affected consumers should review their individual notice letters, which may contain enrollment information not included in the public filings.

First National Holdings data breach timeline:

Date	Event
UNDISCLOSED PUBLICLY	Unauthorized activity began.
UNDISCLOSED PUBLICLY	First National Holdings discovered the incident.
UNDISCLOSED PUBLICLY	Unauthorized activity ended.
UNDISCLOSED PUBLICLY	Data breach investigation concluded.
July of 2026	First National Holdings began notifying affected individuals.

Who is First National Holdings?

First National Holdings, LLC is a Chicago-based specialty finance and asset-holding company listed at 120 N. LaSalle St., Suite 3450, Chicago, Illinois 60602. Public records connect the company with First National Assets and affiliated FNA entities engaged in purchasing, financing, managing, and servicing real estate tax liens, Property Assessed Clean Energy (PACE) assessments, and similar municipal receivables. Securities filings have also identified First National Holdings as a depositor and securitizer in transactions backed by tax-lien and PACE assets.

What should affected individuals do?

Affected individuals should review their notification letter, consider placing a free credit freeze with Equifax, Experian, and TransUnion, and closely monitor their credit reports, bank accounts, payment cards, and health-insurance statements for unfamiliar activity. A fraud alert is another option, although a credit freeze generally provides stronger protection against new accounts being opened.

Because Social Security numbers were involved, consumers may also consider obtaining an IRS Identity Protection PIN to help prevent fraudulent tax returns. Any suspected identity theft should be reported through IdentityTheft.gov, and unexplained medical claims or insurance charges should be reported promptly to the insurer or healthcare provider.

Sources and additional information about the data breach:

• • Texas Attorney General Data Security Breach Reports
  • Vermont Attorney General Security Breach Notices
  • Independent Accountants’ Report (January 4, 2021)
  • FTC Consumer Advice: Identity Theft
  • IdentityTheft.gov
  • IRS Identity Theft Guide for Individuals
  • U.S. Department of Health and Human Services Office of Inspector General: Medical Identity Theft

Class Action FAQ

About This Data Breach Resource

This page was created to give affected individuals and researchers a clear, comprehensive explanation of the First National Holdings data breach. It summarizes what is currently known about the incident, including the timeline, how the breach was discovered, the types of information involved, the number of people affected when available, important notice dates, and steps individuals may want to take after receiving a data breach notification.

This resource is independently written and organized to help readers understand the breach without having to review multiple notices, state attorney general filings, company statements, and related materials. When available, this page relies on primary sources and identifies key facts, unanswered questions, and updates as new information becomes public.

This page is especially relevant for readers searching for information about the First National Holdings data breach, First National Holdings data breach notice, First National Holdings class action investigation, what information was exposed, how many people were affected, and what affected individuals should do next.

Abington Cole + Ellery reviews data breach incidents involving sensitive personal information, financial information, and protected health information. This page is intended to help affected individuals understand the publicly reported facts, the types of information that may have been involved, and practical steps that may reduce the risk of identity theft or medical identity theft.

The information on this webpage is provided for general informational purposes only and does not constitute legal advice. Nothing on this page should be relied upon as legal advice for any particular situation. Submitting information through this page does not create an attorney-client relationship.

For more information about steps you can take to possibly reduce the risk harm arising from a data breach, please review the following article: What are some steps you can take if you've been the victim of a data breach?

This website is not associated with nor authorized by First National Holdings or any affiliated companies. If you have received any other data breach notifications, you may want to review Abington Cole + Ellery's current list of data breach investigations.