Kaaj Technologies Data Breach Investigation

For thousands of small business owners who applied for financing through lenders using Kaaj Technologies, that trust may have been compromised. Contact our data breach lawyers to review your claim.

What Happened at Kaaj?

On January 13, 2026, an unauthorized party allegedly gained access to Kaaj Technologies' computer systems and copied data from its environment. Kaaj discovered the anomalous activity and eventually determined the scope of what had been accessed.

Ailco Equipment Finance Group, an equipment financing company that used Kaaj's platform to process small business loan applications, learned of the incident on February 11, 2026. Breach notification letters were sent to affected individuals on March 26, 2026, and the breach was reported to the attorneys general of California, Massachusetts, Vermont, Oregon, Texas, and several other states. The personal information potentially exposed includes:

• Full names
• Home addresses
• Social Security numbers

What Is Kaaj Technologies?

Kaaj Technologies is a San Francisco-based fintech company that builds AI-powered credit analysis tools for lenders and brokers in the small business lending space. Rather than working directly with borrowers, Kaaj operates behind the scenes, powering the platforms that financial companies use to review and process loan applications.

Your Rights Under California Law

Under the California Consumer Privacy Act, companies are required to implement and maintain reasonable security measures to protect personal information. When they fail to do so and a breach occurs, affected individuals may have grounds for a legal claim.

California law also sets strict timelines for breach notification. Effective January 1, 2026, companies must notify affected California residents within 30 calendar days of discovering a breach, and must alert the California Attorney General within 15 days of notifying consumers if more than 500 residents are affected.

In this case, Ailco documented that it learned of the incident on February 11, 2026. Notification letters did not go out until March 26, 2026, a gap of more than 40 days. Whether that timeline satisfies California's current requirements is a question worth examining closely.

Why You Should Speak With a Data Breach Attorney

You may be entitled to compensation for the harm caused, including costs related to identity theft, the time and effort spent addressing fraudulent activity, and the stress of knowing your most sensitive information is in unknown hands.

If your information was exposed in the Kaaj Technologies breach, contact The Lyon Firm today for a free, no-obligation consultation.