First National Holdings LLC Data Breach: SSNs, Financial Accounts, and Health Insurance Exposed

A Chicago-based company that purchases, finances, and services delinquent property tax liens has disclosed a data breach affecting more than 34,500 individuals. First National Holdings LLC, which operates primarily in Cook County, Illinois, filed breach notifications with multiple state attorneys general in early July 2026, revealing that a wide range of sensitive personal, financial, and health-related information may have been compromised.

Contact a data breach attorney if you believe your data has been impacted in this incident.

What We Know About the First National Breach

First National Holdings reported the incident to the Vermont Attorney General on July 9, 2026, and to the Texas Attorney General the following day. The filings indicate that 34,507 Texas residents and one Vermont resident were affected. However, the company has not publicly disclosed the total number of affected individuals nationwide, and that figure may ultimately prove higher if additional state notifications are filed.

The company has stated that it is notifying affected individuals by mail. If you have done business with First National Holdings or one of its related property tax lien servicing entities and have not yet received a notification letter, it may still be on its way.

What Information Was Exposed?

According to the state filings, the breach may have involved the following categories of personal information:

• Names

• Social Security numbers

• Driver’s license numbers

• Financial account information, including credit and debit card numbers

• Health insurance information

• An additional unspecified category identified only as “other information”

The reported data elements represent a broad range of sensitive personal information. Companies that purchase and service delinquent property tax liens routinely collect financial and identifying information. The inclusion of health insurance information is less common in this industry and raises questions about the scope of records maintained by the company.

Why the Type of Data Matters

Social Security numbers are among the most valuable pieces of information for identity thieves because, unlike credit card numbers, they cannot simply be replaced. When Social Security numbers are exposed alongside driver’s license numbers and financial account information, criminals may have enough details to open fraudulent credit accounts, file false tax returns, or take over existing financial accounts.

Companies that collect Social Security numbers, financial account information, and health-related data have a legal responsibility to implement reasonable safeguards to protect that information. When a breach of this scope occurs, questions naturally arise regarding how the intrusion occurred, how long company systems may have been vulnerable, how the incident was discovered, and whether reasonable security measures were in place.

Depending on the facts that emerge, affected individuals may have grounds to pursue claims for negligence or violations of applicable state consumer protection or data privacy laws.

Get Help With Your First National Holdings Data Breach Claim

If you received a notification letter from First National Holdings regarding this incident, The Lyon Firm can help you understand what happened and evaluate your legal options.

Our attorneys have represented consumers across Illinois and nationwide in complex data breach litigation. We understand the financial and emotional consequences that can follow the unauthorized disclosure of sensitive personal information. Consultations are free and confidential, and we do not charge attorney fees unless we recover compensation on your behalf. Contact the data breach lawyers at The Lyon Firm today to discuss your potential claim.

‍

This article is based on publicly available information as of the publication date and may not reflect subsequent developments. No representation is made that First National Holdings LLC engaged in any wrongdoing, and all individuals and entities are presumed to have acted lawfully unless and until otherwise determined by a court of law.