Almeida Law Group is investigating a data breach at First Advantage Corporation on behalf of Hallcon Corporation. The breach occurred on November 13, 2025 and was discovered on November 17, 2025. If you were affected, contact Almeida Law Group.
About First Advantage Corporation on behalf of Hallcon Corporation
First Advantage Corporation (NASDAQ: FA) is a global employment background screening, identity verification, and drug testing company headquartered in Atlanta, Georgia. The breach involved First Advantage’s Drug & Occupational Health Screening Unit, which processed personal information on behalf of its client, Hallcon Corporation — a transportation and infrastructure services company. Because the compromised employee account held personal data submitted in connection with employment-related screening, affected individuals may have had sensitive identifying information exposed.
What Happened?
First Advantage Corporation on behalf of Hallcon Corporation was listed in a Maine Attorney General filing reporting an external hacking incident. According to the breach notice, on November 17, 2025, First Advantage discovered that an unauthorized third party had used a sophisticated phishing attack to gain access to a single employee’s account in its Drug & Occupational Health Screening Unit. The unauthorized access occurred on or about November 13, 2025, and the attacker downloaded the contents of that employee’s email inbox. A total of 4,669 people were affected. Consumer notification letters were sent on April 21, 2026 — more than five months after the breach was discovered. Per a Massachusetts filing for the same November 2025 incident, the compromised information included Social Security numbers and driver’s license information. Twenty-four months of credit monitoring and identity theft protection services are being offered through Cyberscout, a TransUnion company, with an enrollment deadline of July 21, 2026.
The same November 13, 2025 phishing attack also affected individuals associated with at least one other First Advantage client, Rich Products Corporation, indicating this was a broader incident stemming from a single employee account compromise. No ransomware group or specific threat actor has been publicly attributed. Multiple law firms, including ClassAction.org (sponsored by Bryson Harris Suciu & DeMay PLLC) and Cole & Van Note, are actively investigating this incident for potential class action claims. This is at least the third publicly reported data security incident involving First Advantage entities within roughly 12 months: a Form I-9 breach around February 2024 resulted in a $650,000 class action settlement, and a separate breach involving Profile Advantage accounts was disclosed in November 2024.
Key Facts at a Glance
- Company or Organization: First Advantage Corporation on behalf of Hallcon Corporation
- Industry: Employment background screening / transportation and infrastructure services
- Location: Atlanta, GA (First Advantage); Chicago, IL (Hallcon Corporation)
- Incident type: External system breach (hacking) via phishing
- Date of breach: November 13, 2025
- Date breach discovered: November 17, 2025
- Date of consumer notification: April 21, 2026
- Total persons affected: 4,669
- Identity theft protection offered: Yes — 24 months of credit monitoring and identity theft protection through Cyberscout (TransUnion)
- Enrollment deadline: July 21, 2026
- Prior breach: Yes — First Advantage Form I-9 breach (~February 2024, $650,000 settlement); First Advantage Profile Advantage breach (~November 2024)
- Litigation status: No lawsuit filed specific to this incident; multiple law firms actively investigating for potential class action
- Source: Maine AG Filing; ClassAction.org; Cole & Van Note
What Should You Do?
If you received a notice about this breach, you should enroll in the complimentary 24-month credit monitoring and identity theft protection services offered through Cyberscout before the July 21, 2026 deadline. Because Social Security numbers and driver’s license information were involved, you should also consider placing a fraud alert or credit freeze with Equifax, Experian, and TransUnion to make it harder for someone to open new accounts in your name. Review your credit reports regularly at AnnualCreditReport.com — you are entitled to a free report from each bureau annually. Monitor your financial accounts for any suspicious or unauthorized activity, and report any signs of identity theft to the FTC at IdentityTheft.gov.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
