Data · Official breach reports
Data breaches
Breach reports companies filed with HHS and the California, Washington and Oregon attorneys general, newest first: 9,480 reports. A big breach often turns into a class action months later; when the company already has an open settlement, we link it so you can check whether you can claim.
A breach report is not a lawsuit or a settlement, and nothing here can be claimed by itself. If you got a breach letter, it explains what happened and any free credit monitoring on offer. Settlements you can file for are on the settlements pages.
300organizations in this view (the newest 300)
0with an open settlement
newest report Oct 29, 2026
| Organization | Reported | People affected | What happened | Filed with | Open settlement |
|---|---|---|---|---|---|
| Bangkok Bank PCL - New York Branch | not published | 09/17/2025 | California AG | ||
| Del Monte Foods Corporation II Inc. | not published | 02/07/2026 | California AG | ||
| Photon HealthBusiness Associate, NY | 30,625 | Hacking/IT Incident (Network Server, Other)8/9/2026, 8/10/2026 | California AGHHS (health)Oregon DOJ | ||
| Troutman Pepper Locke LLP | not published | 08/07/2026 | California AG | ||
| Indico Data Solutions, Inc.Business Associate, MA | 4,840 | Hacking/IT Incident (Network Server)05/05/2026 | California AGHHS (health) | ||
| Baker & McKenzie LLP | not published | 08/14/2026, 08/17/2026 | California AG | ||
| Directed Trust Company | not published | 07/04/2026, 07/07/2026 | California AG | ||
| Hitec Group USA | not published | 09/13/2026, 09/17/2026 | California AG | ||
| Sarasota US Topco, Inc. d/b/a Sarku Japan (“Sarku”) | not published | 09/07/2026 | California AG | ||
| Tradier Brokerage Inc. | not published | 08/28/2026 | California AG | ||
| Frontline Education | not published | 08/14/2026, 08/15/2026 | California AG | ||
| USForex Inc. | not published | 09/28/2026 | California AG | ||
| Apollo Management Holdings, L.P. | not published | 07/06/2026 | California AG | ||
| Navigate 360, LLC | not published | 11/21/2025 | California AG | ||
| BASS Medical Group | not published | 09/04/2026 | California AG | ||
| Deposition Solutions, LLC (d/b/a Lexitas) | not published | 09/01/2019 | California AG | ||
| Dill Dill Carr Stonbraker & Hutchings, P.C. | not published | 10/22/2025 | California AG | ||
| Opportune LLP | not published | 06/22/2026 | California AG | ||
| Aldrich Services LLP | 3,202 | 8/22/2026 - 8/23/2026 | California AGOregon DOJ | ||
| Dorsata, Inc. | not published | 08/10/2026, 08/12/2026 | California AG | ||
| Mercadien, P.C. CPAs | 0 | 9/17/2025 - 10/9/2025 | California AGOregon DOJ | ||
| Toyo Tire Holdings of Americas Inc. | not published | 01/06/2026, 02/04/2026 | California AG | ||
| Alma Family ServicesHealthcare Provider, CA | 2,753 | Hacking/IT Incident (Network Server)07/09/2026 | California AGHHS (health) | ||
| Roseburg Therapy dba Stronger Oregon | 1 | Oregon DOJ | |||
| Citizens Bank | not published | 09/10/2026 | California AG | ||
| STS Aviation Group | not published | 08/05/2025 | California AG | ||
| Stitch Connect Inc | not published | 09/18/2026 | California AG | ||
| CDE | not published | 05/22/2026 | California AG | ||
| Covered California | not published | 05/13/2026 | California AG | ||
| Frazer LLP | not published | 03/25/2025 | California AG | ||
| Inner City Education Foundation | not published | 08/04/2024, 09/29/2024 | California AG | ||
| John G. Yphantides, a Professional Law Corporation | not published | California AG | |||
| Neuro Wellness Spa | not published | 08/24/2026 | California AG | ||
| City of Foster City | not published | 02/28/2026, 03/25/2026 | California AG | ||
| MLD Mortgage Inc. dba The Money Store | not published | 09/08/2026, 09/09/2026 | California AG | ||
| BDG Law Group | not published | 09/11/2025 | California AG | ||
| Kern County Superintendent of Schools | not published | 08/14/2026 | California AG | ||
| DriveWealth, LLCFinance | 358,104 | Unauthorized Access2026-09-04 to 2026-09-05 | California AGWashington AG | ||
| JM Bullion, Inc.Business, Retail, TX | 2,366 | Cyberattack: Ransomware2026-04-12 to 2026-04-14 | California AGWashington AG | ||
| The City of Mt. Angel | 471 | 8/25/2026 - 8/25/2026 | Oregon DOJ | ||
| American Board of Preventive Medicine | not published | 03/08/2026 | California AG | ||
| Magna Hospitality Group | not published | 05/22/2025 | California AG | ||
| Porter and Company | not published | 08/30/2026 | California AG | ||
| Tulare Joint Union High School District | not published | California AG | |||
| Blueberry Pediatrics | 340,915 | 8/10/2026 - 8/22/2026 | California AGOregon DOJ | ||
| Allswell Health Medical Group PAHealthcare Provider, CA | 638 | Hacking/IT Incident (Network Server, Other) | HHS (health) | ||
| Cognitive Health Technologies LLCBusiness Associate, NY | 49,467 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Hood River Dental | 16,609 | 1/15/2026 | Oregon DOJ | ||
| AllCare Health, Inc.Health Plan, OR | 782 | Unauthorized Access/Disclosure (Other)8/6/2026 - 8/10/2026 | HHS (health)Oregon DOJ | ||
| The Speech Clinic, LLCHealthcare Provider, GA | 2,168 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| PeaceHealth Sacred Heart Medical Center | 334 | 3/20/2026 - 6/30/2026, 7/1/2026 - 8/4/2026 | Oregon DOJ | ||
| Alisal Union Schol District | not published | 05/20/2026 | California AG | ||
| iRhythm Technologies, Inc.Healthcare Provider, CA | 8,179,772 | Hacking/IT Incident (Network Server)2026-06-03 to 2026-06-08 | California AGHHS (health)Oregon DOJWashington AG | ||
| Secure Healthcare Information Management, LLCHealthcare Provider, PA | 6,810 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Nabi Health, Inc.Business Associate, CA | 783 | Unauthorized Access/Disclosure (Network Server, Other) | HHS (health) | ||
| Harman Fitness | not published | 09/04/2025 | California AG | ||
| Hattiesburg Eye Clinic, P.A.Healthcare Provider, MS | 6,137 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Franklin/Fulton Mental Health/Intellectual & Developmental Disabilities/Early InterventionHealthcare Provider, PA | 640 | Hacking/IT Incident (Email) | HHS (health) | ||
| Advantest America, Inc. | not published | 01/23/2026 | California AG | ||
| Sheppard, Mullin, Richter & Hampton LLP | 204,001 | 8/31/2026 - 8/31/2026 | California AGOregon DOJ | ||
| Innovative Alternatives, IncHealthcare Provider, TX | 1,500 | Hacking/IT Incident (Desktop Computer, Network Server) | HHS (health) | ||
| Fragomen, Del Rey, Bernsen & Loewy, LLP | not published | 05/04/2026, 05/05/2026 | California AG | ||
| Denver Health Medical PlanHealth Plan, CO | 238,083 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Greenberg Traurig, LLP (“GT”) | 150,000 | 8/26/2026 - 8/26/2026 | California AGOregon DOJ | ||
| Bright Smile Dental CareHealthcare Provider, IN | 7,601 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Bay Area Psychological ConsultantsHealthcare Provider, FL | 5,679 | Hacking/IT Incident (Electronic Medical Record, Network Server) | HHS (health) | ||
| Arkansas Urology, P.A.Healthcare Provider, AR | 4,347 | Hacking/IT Incident (Email) | HHS (health) | ||
| Family Physicians, Inc.Healthcare Provider, OH | 885 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Lincoln Property Company Commercial LLC | not published | 03/24/2026 | California AG | ||
| Marana Health Center | not published | 12/18/2025 | California AG | ||
| Atlantic Digestive Specialists, PLLCHealthcare Provider, NH | 173,853 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Midvale Indemnity Company | 38,381 | 6/30/2026 - 8/20/2026 | Oregon DOJ | ||
| Trinity HealthBusiness Associate, MI | 33,234 | Unauthorized Access/Disclosure (Electronic Medical Record) | HHS (health) | ||
| Poppins Payroll CompanyBusiness, Other, CO | 17,954 | Unauthorized Access9/3/2026 | California AGOregon DOJWashington AG | ||
| American Family Connect Insurance Company | not published | 06/30/2026, 08/20/2026 | California AG | ||
| Nishiyamato Academy | not published | 03/25/2026, 03/28/2026 | California AG | ||
| ProCamps | not published | 03/17/2026 | California AG | ||
| City of McMinnville | 122,864 | 6/1/2026 - 7/18/2026 | California AGOregon DOJ | ||
| Lamb Weston Holdings, Inc. | 7,175 | 1/9/2026 - 1/15/2026 | Oregon DOJ | ||
| Martin Brother Distributing Company, Inc.Health Plan, IA | 2,303 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Indiana University Health, Affiliated Covered EntityHealthcare Provider, IN | 2,080 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Health Prime InternationalBusiness Associate, IL | 501 | Hacking/IT Incident (Network Server, Other) | HHS (health) | ||
| Challenge Financial Services, Inc. | not published | 08/17/2026, 08/18/2026 | California AG | ||
| Upbound Group, Inc. | 76,327 | 7/3/2026 - 7/6/2026 | California AGOregon DOJ | ||
| OneMain Financial Group, LLC | 960 | 5/5/2026 - 5/12/2026 | California AGOregon DOJ | ||
| San Bernardino County on behalf of Arrowhead Regional Medical Center | not published | 08/28/2026 | California AG | ||
| MedImpact Healthcare Systems, Inc. | 327,082 | 10/18/2025 | California AGOregon DOJ | ||
| Saber Healthcare GroupBusiness Associate, OH | 282,727 | Hacking/IT Incident (Laptop, Network Server) | HHS (health) | ||
| Ultramobile ImagingHealthcare Provider, NY | 75,000 | Hacking/IT Incident (Network Server, Other) | HHS (health) | ||
| The Kenaitze Indian TribeHealthcare Provider, AK | 9,319 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Center for bone and Joint Surgery of the Palm BeachesHealthcare Provider, FL | 5,461 | Hacking/IT Incident (Network Server, Other) | HHS (health) | ||
| Eskenazi HealthHealthcare Provider, IN | 1,604 | Hacking/IT Incident (Email) | HHS (health) | ||
| Source Care Management, LLC d/b/a NextStep CareHealthcare Provider, GA | 685 | Unauthorized Access/Disclosure (Paper/Films) | HHS (health) | ||
| Vascular Associates of South AlabamaHealthcare Provider, AL | 623 | Unauthorized Access/Disclosure (Email) | HHS (health) | ||
| Kostelic and Associates 3PLLCHealthcare Provider, NC | 535 | Hacking/IT Incident (Email) | HHS (health) | ||
| Financial Administrative Support Services | not published | 05/26/2025, 06/11/2025 | California AG | ||
| Gallagher Transport International Inc. | not published | 01/11/2026 | California AG | ||
| Kings United Way | not published | 08/26/2026 | California AG | ||
| Call-On-Doc, Inc. | 3,663 | 12/28/2025 | Oregon DOJ | ||
| 5Star Life Insurance Company | not published | 11/13/2025 | California AG | ||
| Blanchard Training & Development, Inc. | not published | 03/03/2026, 03/04/2026 | California AG | ||
| HILT-Trust 2020-A and its underlying trusts and affiliates ("HILT") | not published | 07/23/2026 | California AG | ||
| NSE Insurance Agencies | not published | 11/06/2025 | California AG | ||
| Peña and Bromberg | not published | 05/07/2026 | California AG | ||
| New York Psychiatric Services P.C.Healthcare Provider, NY | 777 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Fairwinds Credit Union | not published | 09/07/2025, 11/07/2025 | California AG | ||
| Modoc Medical CenterHealthcare Provider, CA | 29,688 | Hacking/IT Incident (Network Server)01/19/2026, 01/27/2026 | California AGHHS (health) | ||
| Ridgeway Pharmacy, LtdHealthcare Provider, MT | 258,920 | Hacking/IT Incident (Network Server, Other)6/7/2026 - 7/21/2026 | California AGHHS (health)Oregon DOJ | ||
| Woodlawn HospitalHealthcare Provider, IN | 742 | Hacking/IT Incident (Email) | HHS (health) | ||
| Ethan Conrad Properties | not published | 08/24/2026 | California AG | ||
| Friesen Group | not published | 05/15/2025 | California AG | ||
| Fun For Less Tours, Inc. | not published | 10/27/2025 | California AG | ||
| United Underwriters | not published | 04/07/2026 | California AG | ||
| IDScan.net | 13,000,000 | 4/1/2026 - 9/2/2026 | Oregon DOJ | ||
| Paylogix, LLCBusiness, Other, NY | 1,249,201 | Hacking/IT Incident (Network Server)2025-11-13 to 2025-11-18 | California AGHHS (health)Oregon DOJWashington AG | ||
| Cameron Regional Medical CenterHealthcare Provider, MO | 5,468 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Lift Dental PLLC dba Artistic SmilesHealthcare Provider, CO | 3,735 | Hacking/IT Incident (Desktop Computer, Network Server) | HHS (health) | ||
| OU Medicine, Inc.Healthcare Provider, OK | 854 | Unauthorized Access/Disclosure (Electronic Medical Record, Network Server) | HHS (health) | ||
| Radia Inc., PSHealthcare Provider, WA | 616 | Hacking/IT Incident (Network Server, Other) | HHS (health) | ||
| The Office of the Los Angeles City | not published | 12/28/2025, 01/22/2026 | California AG | ||
| Seyfarth Shaw LLP | not published | 08/18/2026 | California AG | ||
| Three Oaks Hospice, IncorporatedBusiness Associate, TX | 36,622 | Hacking/IT Incident (Email) | HHS (health) | ||
| Boston Capital Holdings LPBusiness, Other, MA | 16,292 | Cyberattack: Phishing2026-01-16 to 2026-01-22 | California AGOregon DOJWashington AG | ||
| CallonDoc, Inc.Health, TX | 12,186 | Cyberattack: Ransomware2025-12-22 to 2026-01-03 | California AGWashington AG | ||
| Partnership HealthPlan of California | not published | 05/13/2026, 07/07/2026 | California AG | ||
| AngMar Management ServicesBusiness Associate, TX | 126,196 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| WindRose Health NetworkHealthcare Provider, IN | 33,158 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Tarter Krinsky & Drogin LLPBusiness Associate, NY | 196,645 | Hacking/IT Incident (Network Server)09/09/2025, 09/10/2025 | California AGHHS (health) | ||
| Kaniksu Community Health | 81,136 | 12/2/2025 - 12/18/2025 | California AGOregon DOJ | ||
| Bacon County Health Services, Inc.Healthcare Provider, GA | 501 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Camden-on-Gauley Medical CenterHealthcare Provider, WV | 501 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Klickitat Public Hospital District #2 - dba Skyline HospitalHealthcare Provider, WA | 501 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Alliance Environmental Group, LLC | not published | 04/24/2026 | California AG | ||
| Leggett & Platt, Incorporated Employee Benefits Plan | not published | 10/18/2025 | California AG | ||
| Paradigm Healthcare ServicesBusiness Associate, CA | 970,403 | Hacking/IT Incident (Network Server)10/08/2025, 10/15/2025 | California AGHHS (health) | ||
| Clover HealthHealth Plan, MN | 138,677 | Hacking/IT Incident (Network Server, Other) | HHS (health) | ||
| Lakes Region Visiting Nursing AssociationHealthcare Provider, NH | 1,274 | Hacking/IT Incident (Email) | HHS (health) | ||
| Craneware, Inc.Business Associate, FL | 501 | Hacking/IT Incident (Network Server)7/7/2026 - 7/20/2026 | HHS (health)Oregon DOJ | ||
| See's Candies - Corporate Office | 459 | 4/11/2026 - 4/13/2026 | Oregon DOJ | ||
| Accela, Inc. | not published | 12/11/2025, 12/12/2025 | California AG | ||
| Cambridge Mercantile Corp. (U.S.A.) | not published | 06/11/2026, 06/12/2026 | California AG | ||
| Cornerstone Staffing Solutions, Inc.Business, Human Resources, CA | 366,122 | Unauthorized Access2025-11-06 to 2025-11-21 | California AGOregon DOJWashington AG | ||
| zHealth, Inc.Health, CA | 118,563 | Unauthorized Access2026-01-20 to 2026-01-21 | California AGHHS (health)Oregon DOJWashington AG | ||
| Wichita Family DentalHealthcare Provider, KS | 1,273 | Hacking/IT Incident (Email) | HHS (health) | ||
| Catalyst Physician Group | not published | 12/02/2025 | California AG | ||
| Suffolk Federal Credit Union | not published | 09/17/2025, 10/09/2025 | California AG | ||
| Comprehensive Orthopedics & Musculoskeletal Care, LLCHealthcare Provider, CT | 21,897 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Vernon & Waldrep OB-Gyn AssociatesHealthcare Provider, TX | 17,435 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Prescribe FIT, Inc.Healthcare Provider, OH | 4,537 | Hacking/IT Incident (Email) | HHS (health) | ||
| Persona DentalHealthcare Provider, MN | 3,386 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Interim HealthCare Inc.Healthcare Provider, FL | 1,283 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Quatrro Business Support Services, Inc.Business, Professional Services, GA | 188,218 | Cyberattack: Ransomware2025-11-11 to 2025-11-19 | California AGOregon DOJWashington AG | ||
| ASOS US Sales LLCBusiness, Clothing, NY | 138,828 | Unauthorized Access7/28/2026 - 7/29/2026 | California AGOregon DOJWashington AG | ||
| Azle Cube Smiles PLLCHealthcare Provider, TX | 3,280 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Novocure Inc.Healthcare Provider, PA | 1,464 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Northwest Paper Box Manufacturers | 752 | 1/1/0001 | Oregon DOJ | ||
| Next Level Medical, LLCHealthcare Provider, TX | 501 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| BestCare treatment Services, Inc.Healthcare Provider, IL | 4,216 | Unauthorized Access/Disclosure (Network Server)6/15/2026 - 8/10/2026 | HHS (health)Oregon DOJ | ||
| Hibbett Retail, Inc.Business, Retail, AL | 510 | Unauthorized Access2026-04-22 to 2026-04-25 | California AGWashington AG | ||
| Hamaspik (Choice and Inc.)Health Plan, NY | 8,181 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Catalyst Brands LLCBusiness, Retail, TX | 187,341 | Unauthorized Access5/20/2026 - 6/10/2026 | California AGOregon DOJWashington AG | ||
| Bimbo Bakeries USABusiness, Other, TX | 46,064 | Cyberattack: Other8/9/2025 - 8/9/2025 | California AGOregon DOJWashington AG | ||
| Provident Behavioral HealthHealthcare Provider, IL | 25,086 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| LHC Group, Inc.Healthcare Provider, LA | 6,602 | Hacking/IT Incident (Network Server)2026-04-07 to 2026-04-15 | HHS (health)Washington AG | ||
| Life Unlimited, Inc.Healthcare Provider, MO | 1,530 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Beaver County Behavioral HealthHealthcare Provider, PA | 501 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| COMHAR, Inc.Healthcare Provider, PA | 501 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Elixir Medical Corporation | not published | 07/20/2026, 07/21/2026 | California AG | ||
| American Addiction CentersHealth, TN | 327,754 | Unauthorized Access6/5/2026 - 6/8/2026 | California AGHHS (health)Oregon DOJWashington AG | ||
| Boston Health Care for the Homeless Program | 201,260 | 10/31/2025 - 11/11/2025 | Oregon DOJ | ||
| Capital Family PhysiciansHealthcare Provider, NC | 2,545 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Mogren, Glessner & Ahrens, P.S.Business, Legal, WA | 1,379 | Cyberattack: Ransomware2026-06-09 to 2026-09-10 | Washington AG | ||
| The Lighthouse for the Blind, Inc.Health, WA | 520 | Cyberattack: Unclear/unknown2026-04-09 to 2026-04-20 | Washington AG | ||
| YouLend US LLC | 23,105 | 6/5/2026, 6/9/2026 | California AGOregon DOJ | ||
| Oculus PathologyHealthcare Provider, TX | 20,040 | Hacking/IT Incident (Email) | HHS (health) | ||
| See’s Candies, Inc.Business, Consumable, CA | 628 | Cyberattack: Ransomware2026-04-11 to 2026-04-13 | California AGWashington AG | ||
| Fiesta Insurance Franchise Corporation | not published | 06/09/2025 | California AG | ||
| Fishbrain AB | not published | 07/30/2026 | California AG | ||
| HumanEdge, Inc. | not published | 03/17/2026, 03/18/2026 | California AG | ||
| Knowledge Research Center | not published | 07/08/2026 | California AG | ||
| DeMera DeMera Cameron, LLP | not published | 03/27/2026 | California AG | ||
| Viking Enterprises, Inc. d/b/a City Ambulance ServiceHealthcare Provider, TX | 14,324 | Hacking/IT Incident (Email) | HHS (health) | ||
| The Foot and Ankle Wellness Center of Western PennsylvaniaHealthcare Provider, PA | 653 | Unauthorized Access/Disclosure (Electronic Medical Record, Network Server) | HHS (health) | ||
| Berkeley Research Group, LLC | not published | 02/28/2025 | California AG | ||
| Virta Health Corp. and Virta Medical, PC | not published | 03/19/2026, 03/22/2026 | California AG | ||
| Vista Del Mar Child and Family ServicesHealthcare Provider, CA | 500 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| RB American Group LLCBusiness, Hospitality, OH | 66,608 | Cyberattack: Ransomware4/8/2026 - 4/9/2026 | Oregon DOJWashington AG | ||
| White River Junction VA Medical CenterHealthcare Provider, VT | 1,408 | Unauthorized Access/Disclosure (Email) | HHS (health) | ||
| AvtechTyee, Inc.Business, Manufacturing, WA | 662 | Cyberattack: Ransomware2025-11-07 to 2025-11-27 | Washington AG | ||
| Bennett College | not published | California AG | |||
| Integrated Specialty Coverages, LLC (“ISC”) | 12,844 | 6/8/2026 - 6/11/2026 | California AGOregon DOJ | ||
| Kim KnobbeBusiness Associate, MO | 11,927 | Unauthorized Access/Disclosure (Network Server, Other) | HHS (health) | ||
| Psychiatry of Texas PLLCHealthcare Provider, TX | 5,902 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Greystar Real Estate Partners, LLCBusiness, Real Estate, SC | 905 | Cyberattack: Phishing2026-05-01 to 2026-05-18 | Washington AG | ||
| AnMed HealthHealthcare Provider, SC | 501 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Osceola Mental Health Inc. dba Park Place Behavioral HealthcareHealthcare Provider, FL | 71,702 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| McDermott Will & Schulte LLPBusiness Associate, IL | 5,427 | Unauthorized Access/Disclosure (Network Server) | HHS (health) | ||
| News Corp UK & Ireland LimitedBusiness, Other, NY | 3,304 | Cyberattack: Other2026-07-20 | Washington AG | ||
| Murfreesboro Medical ClinicHealth, TN | 845 | Cyberattack: Ransomware2025-12-02 to 2025-12-18 | California AGWashington AG | ||
| Cascade Coffee, LLCBusiness, Manufacturing, WA | 610 | Cyberattack: Ransomware2026-07-30 | Washington AG | ||
| Advantage Home Health CareHealthcare Provider, IN | 19,851 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Shoshone Medical CenterHealthcare Provider, ID | 553 | Hacking/IT Incident (Email) | HHS (health) | ||
| WellDyneRX, LLCHealthcare Provider, FL | 500 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Livara Health Medical Group - dba SpineZone | not published | 12/02/2025, 12/18/2025 | California AG | ||
| Together Women's Health LLC - Aesto | not published | 12/02/2025, 12/18/2025 | California AG | ||
| Pan American Group LLCBusiness, Hospitality, OH | 12,309 | Cyberattack: Ransomware2026-04-08 to 2026-04-09 | California AGWashington AG | ||
| Allied Health | not published | California AG | |||
| Museum Associates d/b/a Los Angeles Museum of Art (LACMA) | not published | 07/07/2025 | California AG | ||
| Grafton City Hospital, Inc.Healthcare Provider, WV | 1,215 | Hacking/IT Incident (Email) | HHS (health) | ||
| Premier Medical Group of the Hudson Valley P.C.Healthcare Provider, NY | 282,075 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Kern Psychiatric Health and Wellness Center, IncHealthcare Provider, CA | 51,352 | Hacking/IT Incident (Network Server)04/16/2026 | California AGHHS (health) | ||
| Hawaii Dental Group, Inc DBA Hawaii Family DentalHealthcare Provider, HI | 45,853 | Hacking/IT Incident (Email) | HHS (health) | ||
| Allergic Disease Associates, P.C. dba The Asthma CenterHealthcare Provider, PA | 5,321 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| North Dakota Department of Health and Human Services, Developmental Disabilities SectionHealthcare Provider, ND | 1,750 | Hacking/IT Incident (Email) | HHS (health) | ||
| Baraga County Memorial HospitalHealthcare Provider, MI | 501 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| The Health Trust and its subsidiary, FASS | not published | 05/26/2025, 06/11/2025 | California AG | ||
| POLAM Federal Credit Union | not published | 05/20/2025 | California AG | ||
| HUT American Group LLC | 135,007 | 4/8/2026 - 4/9/2026 | Oregon DOJ | ||
| Rockwood Retirement CommunitiesHealth, WA | 7,136 | Cyberattack: Ransomware2026-02-15 to 2026-02-16 | Washington AG | ||
| Life Bridges, Inc.Healthcare Provider, TN | 5,194 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Southern Illinois UniversityEducation, IL | 552 | Unauthorized Access2025-07-10 to 2025-08-16 | California AGWashington AG | ||
| Nebraska Orthopaedic Center, P.C. | not published | 12/02/2025 | California AG | ||
| Northern Inyo Healthcare District d/b/a Northern Inyo Hospital | not published | 12/02/2025, 12/18/2025 | California AG | ||
| Nebraska Orthopaedic CenterHealth, NE | 234,239 | Unauthorized Access2025-12-02 to 2025-12-18 | Oregon DOJWashington AG | ||
| United Language Group, LLCBusiness Associate, KS | 4,649 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Silver Summit Medical Corporation | not published | 11/27/2025 | California AG | ||
| Apple American Group LLC and Apple American Group II, LLCBusiness, Hospitality, OH | 282,573 | Cyberattack: Ransomware4/8/2026 - 4/9/2026 | California AGOregon DOJWashington AG | ||
| Turner Construction CompanyBusiness, Construction, NY | 70,256 | Cyberattack: Ransomware7/2/2026 - 7/15/2026 | California AGOregon DOJWashington AG | ||
| Hillcrest Medical Research LLC.Healthcare Provider, FL | 5,785 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Amgen Inc. | not published | 07/01/2026 | California AG | ||
| Forrestall CPAs LLC | not published | 12/22/2025, 12/30/2025 | California AG | ||
| Langwasser & Company CPAs | not published | 05/05/2026 | California AG | ||
| Merced Union High School District | not published | 08/11/2025 | California AG | ||
| PSI Premier Specialties, Inc. d/b/a Medical Express PSIHealthcare Provider, TX | 4,100 | Hacking/IT Incident (Email) | HHS (health) | ||
| AdaptHealth, LLCHealthcare Provider, PA | 4,115,802 | Hacking/IT Incident (Network Server)2026-06-05 to 2026-06-15 | California AGHHS (health)Washington AG | ||
| Baylor GeneticsHealthcare Provider, TX | 2,810,878 | Hacking/IT Incident (Network Server)2026-06-11 to 2026-06-17 | California AGHHS (health)Washington AG | ||
| Lennar Mortgage, LLCFinance, FL | 348,416 | Unauthorized Access5/26/2026 - 6/1/2026 | California AGOregon DOJWashington AG | ||
| Quantum Health, Inc.Health, OH | 184,376 | Hacking/IT Incident (Network Server)5/29/2026 - 6/1/2026 | California AGHHS (health)Oregon DOJWashington AG | ||
| Mountain Rheumatology Professional, LLCHealthcare Provider, CO | 5,378 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Gardiner Family Chiropractic, PCHealthcare Provider, ME | 5,000 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Integrative Emergency Services, LLCBusiness Associate, TX | 2,009 | Hacking/IT Incident (Email) | HHS (health) | ||
| Well Child, Inc.Healthcare Provider, TN | 500 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| May Trucking Company | 3,766 | 4/1/2026 - 6/21/2026 | California AGOregon DOJ | ||
| Corporation Service Company | not published | 08/10/2025, 08/25/2025 | California AG | ||
| Oakdale Ear Nose & Throat PA d/b/a Minnesota ENTHealthcare Provider, MN | 99,714 | Hacking/IT Incident (Email) | HHS (health) | ||
| Temple Adat Shalom Sisterhood | not published | 01/26/2026 | California AG | ||
| Universal Plant Services, LLC | not published | 06/08/2026 | California AG | ||
| Community Health Care, Inc.Healthcare Provider, OH | 808 | Hacking/IT Incident (Email) | HHS (health) | ||
| Longview ER Operations, LLCHealthcare Provider, TX | 501 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Lennar Corporation | not published | 03/24/2026 | California AG | ||
| Boston Healthcare for the Homeless ProgramHealthcare Provider, MA | 201,260 | Hacking/IT Incident (Network Server)10/31/2025 | California AGHHS (health) | ||
| Kovack Financial, LLCFinance, FL | 109,506 | Cyberattack: Ransomware8/8/2025 - 8/27/2025 | California AGOregon DOJWashington AG | ||
| Westchester Institute for Human Development, Inc.Healthcare Provider, NY | 938 | Hacking/IT Incident (Email) | HHS (health) | ||
| USA DeBusk LLC | not published | 08/14/2025 | California AG | ||
| Central Arkansas Pediatrics, P.A.Healthcare Provider, AR | 1,500 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Deseye, PLLC d/b/a Princeton Family Eye CareHealthcare Provider, TX | 1,050 | Hacking/IT Incident (Email) | HHS (health) | ||
| Horizon Eye Care Laser & Eye Surgery CenterHealthcare Provider, NJ | 501 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Cushman & Wakefield | not published | 04/21/2026, 04/29/2026 | California AG | ||
| Abbott Cancer Diagnostics | 1 | 7/8/2026 - 7/8/2026 | Oregon DOJ | ||
| Hamill & Kaplan | not published | California AG | |||
| Aesto, LLCBusiness, Software, AL | 9,540,683 | Unauthorized Access2025-12-02 to 2025-12-18 | HHS (health)Oregon DOJWashington AG | ||
| NFI North, Inc.Healthcare Provider, NH | 49,540 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Wilmer Cutler Pickering Hale and Dorr LLPBusiness, Legal, DC | 35,218 | Theft or Mistake5/8/2026 - 5/8/2026 | California AGOregon DOJWashington AG | ||
| New York City Regional Center, LLC | not published | 03/30/2026, 04/27/2026 | California AG | ||
| Robert Arshagouni | not published | 01/12/2026, 02/25/2026 | California AG | ||
| Station Casinos, LLC | not published | 03/05/2026 | California AG | ||
| CareCloud, Inc.Health, NJ | 3,756,469 | Unauthorized Access3/16/2026 - 6/24/2026 | California AGHHS (health)Oregon DOJWashington AG | ||
| Eyemart Express, LLCHealthcare Provider, TX | 25,000 | Unauthorized Access5/26/2026 | California AGHHS (health)Oregon DOJWashington AG | ||
| JRK Property Holdings, Inc.Business, Real Estate, CA | 5,667 | Cyberattack: Ransomware3/26/2026 - 4/22/2026 | California AGOregon DOJWashington AG | ||
| Malin + Goetz, Inc. | not published | 05/22/2026, 06/10/2026 | California AG | ||
| UCLA Health | not published | 12/27/2024, 04/21/2026 | California AG | ||
| CTS Journey Holdings, LLC, a Delaware limited liability company (DBA Corporate Travel Service) | 37,682 | 12/3/2025 - 12/11/2025 | California AGOregon DOJ | ||
| PAMCAH-UA Local 675 Health and Welfare FundHealth Plan, HI | 8,319 | Hacking/IT Incident (Email) | HHS (health) | ||
| CTS Journey Holdings, LLC, a Delaware limited liability compBusiness, Hospitality, MI | 2,226 | Cyberattack: Ransomware2025-12-03 to 2025-12-11 | Washington AG | ||
| The Moody Bible Institute of Chicago | 155,226 | 6/12/2026 - 6/12/2026 | California AGOregon DOJ | ||
| A-O-M-S, P.L.L.C. d/b/a Arkansas Oral & Maxillofacial SurgeonsHealthcare Provider, AR | 64,831 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Everside HealthHealth, IN | 21,308 | Cyberattack: Other2025-12-02 to 2025-12-18 | California AGWashington AG | ||
| Tarboro Family DentistryHealthcare Provider, NC | 4,713 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Monongalia County General Hospital CompanyHealthcare Provider, WV | 2,173 | Hacking/IT Incident (Email) | HHS (health) | ||
| Asheville Victoria NC Opco LLC d/b/a Elevate Health & RehabilitationHealthcare Provider, NC | 1,551 | Hacking/IT Incident (Desktop Computer, Network Server) | HHS (health) | ||
| Asheville Beaverdam NC Opco LLC d/b/a Bear Mountain Health and RehabilitationHealthcare Provider, NC | 1,397 | Hacking/IT Incident (Electronic Medical Record, Network Server) | HHS (health) | ||
| Asheville US Seventy NC Opco LLC d/b/a Swannanoa Valley Health and RehabilitationHealthcare Provider, NC | 1,045 | Hacking/IT Incident (Desktop Computer, Network Server) | HHS (health) | ||
| Manning Regional Healthcare CenterHealthcare Provider, IA | 746 | Hacking/IT Incident (Email) | HHS (health) | ||
| Interim HealthCare of Oklahoma City, Inc.Healthcare Provider, OK | 500 | Hacking/IT Incident (Email, Network Server) | HHS (health) | ||
| Stanislaus County Health Services Agency | not published | 12/02/2025, 12/18/2025 | California AG | ||
| SM Energy Company | 40,109 | 5/15/2026 - 5/19/2026 | California AGOregon DOJ | ||
| Microcode, Inc.Business, Software, FL | 4,096 | Cyberattack: Ransomware2026-01-19 to 2026-04-14 | Washington AG | ||
| MPS Enterprises, Inc.Health Plan, TX | 675 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Pennsylvanie Dermatology PartnersHealthcare Provider, MD | 500 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| TransGlobal Insurance Agency, Inc.Finance, Other, NV | 71,597 | Unauthorized Access2026-02-19 to 2026-02-24 | California AGOregon DOJWashington AG | ||
| Clinical Registry SolutionsBusiness Associate, NY | 8,545 | Hacking/IT Incident (Network Server)04/09/2026 | California AGHHS (health) | ||
| Associated EndocrinologistsHealthcare Provider, MI | 4,979 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| Central Texas Oral HealthHealthcare Provider, TX | 1,389 | Hacking/IT Incident (Desktop Computer, Email) | HHS (health) | ||
| ADT, Inc.Business, Other, FL | 331,536 | Unauthorized Access4/20/2026 - 4/20/2026 | Oregon DOJWashington AG | ||
| Fresno County Department of Social Services | not published | 08/26/2025 | California AG | ||
| Sunrise Company | not published | 04/23/2026 | California AG | ||
| Regional Center of Orange CountyBusiness Associate, CA | 16,545 | Improper Disposal (Paper/Films)05/27/2026 | California AGHHS (health) | ||
| Cornerstone Behavioral HealthcareHealthcare Provider, ME | 14,830 | Hacking/IT Incident (Network Server) | HHS (health) | ||
| SPay Inc dba Stack SportsBusiness, Other, TX | 1,190 | Cyberattack: Skimmers2026-05-08 to 2026-06-22 | California AGWashington AG | ||
| Bridgeway Benefit Technologies LLCBusiness, Other, FL | 54,838 | Hacking/IT Incident (Email)3/5/2026 - 5/19/2026 | California AGHHS (health)Oregon DOJWashington AG |
Where this comes from. Official government breach lists, read every few hours: the HHS Office for Civil Rights breach portal (health breaches of 500+ people still under investigation, about two years), the California Attorney General (notices sent to 500+ Californians, since 2012), the Washington Attorney General (500+ Washingtonians) and the Oregon Department of Justice (250+ Oregonians). California publishes no count; Washington and Oregon count only their own residents; HHS counts everyone.
What we leave out. Reports filed under one person's name, such as a solo doctor's or dentist's office: we never name people. The "open settlement" link is matched on the company name, so check the settlement page to be sure it is the same company and the same breach.