---
title: "Pathpoint analytics-tool data incident"
description: "Pathpoint analytics-tool data breach: verified timeline, impact and response through October 7, 2026."
incident_type: "Data incident"
status: "active"
last_modified: "2026-10-07"
canonical_url: "https://www.ally.security/incidents/pathpoint-analytics-tool-data-incident-2026"
markdown_url: "https://www.ally.security/incidents/pathpoint-analytics-tool-data-incident-2026.md"
stix_url: "https://www.ally.security/incidents/pathpoint-analytics-tool-data-incident-2026/stix.json"
---

# Pathpoint analytics-tool data incident

Pathpoint discovered unauthorized database access through an internal analytics tool.

Last modified Oct 7, 2026 · 1 source

## Summary

- **Environment:** Internal analytics tool and connected databases
- **Operational impact:** Pathpoint reported no service interruption
- **Financial impact:** No incident cost established in the reviewed evidence

## What happened

[Pathpoint](https://www.pathpoint.com/) discovered unauthorized database access through an internal analytics tool. [1](#source-1)

## Impact

Accessed records included contact, policy, communications and billing information, plus some Social Security and tax identifiers. [1](#source-1)

## Timeline

### August 24, 2026 — Discovery and containment

Pathpoint identified and contained the incident. [1](#source-1)

### August 27, 2026 — Public notice

Pathpoint published its [incident notice](https://www.pathpoint.com/blog/2026-metabase-incident). [1](#source-1)

### October 7, 2026 — Briefing updated

This briefing was last reviewed and updated on October 7, 2026.

## Threat Group & Attack Vector

Pathpoint attributed access to a previously unknown third-party software flaw; downloading remained possible rather than confirmed. [1](#source-1)

### Actors

- No threat actor group has been identified in the reviewed public evidence.

### TTPs

- No specific MITRE ATT\&CK technique is currently mapped for this case.

## Response

It patched the tool, rotated credentials and restored a clean backup. [1](#source-1)

Pathpoint reported uninterrupted services and offered affected individuals identity protection. [1](#source-1)

## Assets

[Download the case-scoped STIX 2.1 bundle](<https://www.ally.security/incidents/pathpoint-analytics-tool-data-incident-2026/stix.json>)

## Sources

Primary source records used to research this incident.

<a id="source-1"></a>

### Security Incident Notice: August 2026

official · Pathpoint, Inc. · Aug 27, 2026

<https://www.pathpoint.com/blog/2026-metabase-incident>

<details>
<summary>Evidence ledger</summary>

Review the supporting structured claims.

1. **Disclosed At · 100% confidence · current**  
   Pathpoint analytics-tool data breach: 2026-08-27
2. **Resulted In · 100% confidence · current**  
   Pathpoint analytics-tool data breach: Pathpoint attributed access to a previously unknown third-party software flaw; downloading remained possible rather than confirmed.
3. **Resulted In · 100% confidence · current**  
   Pathpoint analytics-tool data breach: Pathpoint discovered unauthorized database access through an internal analytics tool.
4. **Resulted In · 100% confidence · current**  
   Pathpoint analytics-tool data breach: It patched the tool, rotated credentials and restored a clean backup.
5. **Affected Organization · 100% confidence · current**  
   Pathpoint analytics-tool data breach: Pathpoint, Inc.
6. **Resulted In · 100% confidence · current**  
   Pathpoint analytics-tool data breach: Pathpoint reported uninterrupted services and offered affected individuals identity protection.
7. **Exposed Data Category · 100% confidence · current**  
   Pathpoint analytics-tool data breach: Tax identification numbers
8. **Exposed Data Category · 100% confidence · current**  
   Pathpoint analytics-tool data breach: Social Security numbers
9. **Resulted In · 100% confidence · current**  
   Pathpoint analytics-tool data breach: Accessed records included contact, policy, communications and billing information, plus some Social Security and tax identifiers.
10. **Discovered At · 100% confidence · current**  
   Pathpoint analytics-tool data breach: 2026-08-24
11. **Exposed Data Category · 100% confidence · current**  
   Pathpoint analytics-tool data breach: Contact information

</details>