Zaxis Financial Services Data Breach

Zaxis Financial Services Americas, LLC detected an intruder on its network on December 30, 2025. It didn’t notify anyone until September 1, 2026 — 245 days later — and the notice letter doesn’t explain why.

Zaxis Financial Services Americas, LLC, a financial-services firm based in Alpharetta, Georgia, notified the New Hampshire Attorney General on September 1, 2026 of a data breach affecting at least five New Hampshire residents. According to the notice letter, filed by the firm’s outside counsel, Zaxis first identified suspicious activity on its network on December 30, 2025. Notification letters didn’t go out to affected individuals until September 1, 2026 — a gap of 245 days.

Source: New Hampshire Department of Justice security breach notification filing, dated 09/01/2026, submitted by Baker, Donelson, Bearman, Caldwell & Berkowitz on behalf of Zaxis Financial Services Americas, LLC.

No Explanation for the Delay

Zaxis’s own notice letter is unusually thin on the reason for the 245-day gap. It states only that the company ‘immediately took steps to secure its environment and launched an investigation’ upon detection, then jumps straight to the September notification. Most breach notices in this category break the interval into a forensic-investigation phase and a data-review phase, because those dates help justify the delay. Zaxis’s letter supplies neither. Georgia law requires notice ‘in the most expedient time possible and without unreasonable delay,’ and New Hampshire’s statute uses similar language requiring notice ‘as soon as possible.’

What Information Was Exposed?

According to Zaxis’s notice letter, the exposed information includes:

• Full name
• Social Security number
• Driver’s license information
• Passport information
• Date of birth

The inclusion of passport numbers is notable for a financial-services firm — it suggests the exposed files may include identity-verification or know-your-customer records rather than routine business correspondence.

How Many People Are Affected?

Zaxis’s New Hampshire filing confirms only five affected New Hampshire residents. That is a single-state slice, not the total scope — New Hampshire resident counts are typically a small fraction of a breach’s true size. Georgia, where Zaxis is based, does not operate a public breach notification database, so there is currently no source that would supply a nationwide figure. Zaxis is offering one year of credit monitoring to those it has notified.

Do You Have Legal Options?

Financial-services companies that collect and store sensitive personal and identification information have a legal duty to secure it and to notify affected individuals without unreasonable delay.

If you received a notice letter from Zaxis Financial Services Americas, contact Emery | Reddy today for a Free Case Review.

Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations that manage healthcare data are legally required to safeguard this information. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, or other misuse.

FAQ

Who is affected by the Zaxis data breach?

Zaxis has confirmed at least five affected New Hampshire residents in its regulatory filing. That’s only a single-state slice, and the company hasn’t disclosed a total number affected.

What information was exposed?

According to Zaxis’s own notice letter, the exposed data includes names, Social Security numbers, driver’s license information, passport information, and dates of birth.

Why did it take 245 days to notify people?

Zaxis detected the intrusion on December 30, 2025 but didn’t send notice letters until September 1, 2026. The company’s own notice letter doesn’t explain the reason for the delay.

What is Zaxis offering affected individuals?

According to the notice letter, Zaxis is offering one year of complimentary credit monitoring to those it has notified.

Do I have a legal claim?

Financial-services companies that collect and store sensitive personal and identification information have a legal duty to secure it and to notify affected individuals without unreasonable delay. If you received a notice letter from Zaxis Financial Services Americas, contact the Data Breach Attorneys at Emery | Reddy at 916.995.5968 or www.emeryreddy.com for a Free Case Review. No Fee Unless We Recover.