Business Council of New York State, Inc. Data Breach Investigation

Migliaccio & Rathod LLP is involved in the Business Council of New York State, Inc. Data Breach Investigation, regarding a breach that impacted 47,329 people and their personal information.

Between February 24, 2025, and February 25, 2025, an unauthorized actor accessed the internal systems of the Business Council of New York State, Inc. (“BCNYS”). BCNYS conducted an investigation on or about August 4, 2024, that uncovered one or more of the folders accessed contained personally identifiable information. Subsequently, BCNYS provided notice of the data breach to affected individuals on August 15, 2025. The impacted data includes the following sensitive information:

  • Names
  • Social Security numbers
  • Dates of birth
  • State ID numbers
  • Financial account numbers
  • Payment card numbers and access PINs
  • Taxpayer identification numbers
  • Electronic signature information
  • Medical information

The Business Council of New York State, Inc. Breach

The Business Council of New York State, Inc. recently provided notice of the data breach. All of the information stolen is likely valuable and dangerous to affected victims. As is likely to be the case with the Business Council of New York State, Inc. data breach, in previous cyberattacks, victims of data theft have noticed identity theft attempts ranging from fraudulent charges on bank accounts or credit cards, to unauthorized credit card applications, to medical services or government services ordered in their name, to their information being posted on the dark web, to a massive uptick in the number of spam text messages, calls and emails received.

Are you concerned that you might be affected by the Business Council of New York State, Inc. data breach?

If you have concerns that you have been affected by this data breach, and/or have experienced suspicious activity since February 24, 2025, we would like to hear from you. Please complete the contact form on this page, send us an email at [email protected], or give us a call at (202) 470-3520.

    The following will ask for your contact information so that we may reach you to talk about potential claims. This information is for our records only and will not be shared. By continuing, you consent to the collection of this information for these limited purposes.


    Did you receive a notification that you were affected by the data breach?


    Did you suffer harm after the data breach that was possibly related to the breach?

    If yes, what kind of harm? Select all that apply.


    Would you like to join our newsletter to receive notifications about other investigations we're looking into, as well as updates on ongoing cases?