A data breach at Poppins Payroll Company involved Social Security numbers, financial account information, and credit or debit card information. At least 333 Vermont residents are affected, and the company has not said how many people were affected nationwide.
Poppins Payroll...
Patient information from Arrowhead Regional Medical Center was taken in a data breach at Buchalter LLP, a law firm that does legal work for the hospital. The breach was found on August 28, 2026, and patients were notified one month later.
Arrowhead Regional Medical Center...
CITGO Petroleum Corporation is notifying current and former employees that their personal information was exposed — not because CITGO's own systems were hacked, but because a vendor two layers down its benefits-administration chain, Paylogix, LLC, was breached nearly a year...
Ladenburg Thalmann & Co. Inc., a securities broker-dealer and investment banking firm, is notifying clients that an email phishing incident exposed their Social Security numbers, government ID numbers, and financial account information.
Ladenburg Thalmann & Co. Inc.,...
OneMain Financial Group, LLC, one of the country's largest consumer installment lenders, has notified the Texas Attorney General that 15,472 Texas customers' names, addresses, and Social Security numbers were exposed in a data breach — but the company's filing doesn't say how...
NSE Insurance Agencies detected unauthorized access to its network in late November 2025. It didn't confirm that customers' Social Security numbers, financial account information, and driver's license numbers had been taken until August 2026 — and didn't send notice until...
Ridgeway Pharmacy Ltd. is notifying customers that their health information, insurance information, payment card details, and prescription records may have been exposed after an unauthorized party accessed the pharmacy's website — a website built and run by a third-party...
Alliance Environmental Group, LLC, a California environmental remediation contractor based in Azusa, is notifying individuals that their personal information may have been exposed after unauthorized access to its network earlier this year.
Alliance Environmental Group, LLC,...
Ethan Conrad Properties, the largest commercial landlord in the Sacramento region, is notifying current and former employees of a cybersecurity incident that may have exposed their personal information — a notice signed not by IT or legal, but by the company's Chief People...
The Friesen Group confirmed unauthorized access to its network in July 2025. It didn't finish figuring out whose data was affected until July 2026 — a full year later — and didn't send notice until September 2026. All told, 490 days passed between discovery and...