Haley’s Metal Shop Hit in BEC Attack
Biddeford, Maine-based Haley’s Metal Shop, Inc. suffered a business email compromise cyberattack in December where personally identifiable information ended up stolen in the hack.
“On December 1, 2025, Haley’s Metal Shop, Inc. identified and addressed an email phishing incident associated with one employee’s email account,” the company said in a notice to victims. “Upon identifying the activity, Haley’s Metal Shop promptly took steps to secure the account and began an investigation.”
As a result, the investigation determined an unauthorized actor accessed the employee’s email account only on December 1. Haley’s Metal Shop reviewed the emails and attachments in the email account. On January 23, the company found they contained the name, Social Security number, driver’s license number, and/or financial account information.