Data Breach Lawsuits & Investigations

Texas-based Nelson University has disclosed a data breach spanning from March to April 2025 involving sensitive personal information.

Attorneys are investigating claims from ransomware group ShinyHunters that department store JCPenney was breached in June 2026.

Attorneys are investigating claims from ransomware group Icarus that The Credit Pros, a credit improvement company, was breached in June 2026.

Ohio Living, operating 11 residential communities and providing home healthcare, hospice, and palliative care across the state, has disclosed an April 2026 data breach.

Real estate development, construction, and management company L+M Development Partners has disclosed a data breach that may have compromised sensitive personal information.

Attorneys are investigating claims from hacker Qilin that MAVA Behavioral Health, operating in Texas, Florida, and Illinois, was breached in June 2026.

Investment management firm Columbia Pacific Advisors has reported a November 2025 data breach that may have compromised sensitive personal information.

Open Arms Care Corporation, which provides residential services for individuals with disabilities in Tennessee, has disclosed a data breach between June and August 2025.

Palacio, Palacio & Zimmerman, a Miami-based accounting firm, has reported a data breach involving sensitive personal information.

Mortgage brokerage firm C2 Financial has reported that a third-party data breach may have compromised sensitive information related to loan applications.

Karl Auto Group, operating several dealerships in Iowa, has confirmed that a data breach occurring during or before March 2026 may have exposed sensitive information.

Attorneys are investigating claims from ransomware group Akira that Florida-based Associated Financial Consultants & Investor Services was breached in June 2026.

Financial technology company Evertec has reported a May 2026 data breach that may have exposed financial and personal information.

Lawyers are examining claims from hacker Worldleaks that Access Dental & Orthodontics, located in Texas, Indiana, Illinois, and New Mexico, was breached in June 2026.

Fintech Holdco, which operates a platform that automates business-to-business sales, has reported a data breach involving sensitive personal information.

South Carolina-based McLeod Health has disclosed an October 2025 data breach involving sensitive information belonging to Dillon Family Medicine patients.

Plaza Home Mortgage, operating nationally, has confirmed a February 2026 data breach that may have compromised sensitive personal information.

Attorneys are investigating claims from ransomware group Termite that UEI College, a network of vocational training and trade schools, was breached in May 2026.

Clarinda Regional Health Center, operating in Iowa, has confirmed an October 2025 data breach that may have compromised sensitive information.

Southern Illinois Ob-Gyn Associates has disclosed a data breach discovered in November 2025 that may have compromised personal and protected health information.

BAYADA Home Health Care, operating in 20+ U.S. states, has reported a February/March 2026 data breach involving personal and protected health information.

Educational Employees Credit Union, with branches throughout California, has disclosed a December 2025 data breach involving sensitive information.

KerberRose, a Wisconsin-based accounting firm, has reported an April 2026 data breach that may have compromised sensitive personal information.

Attorneys are investigating claims from threat actor Qilin that Providence Medical Group, operating multiple locations in Ohio, was breached in May 2026.

Attorneys are investigating claims from ransomware group Qilin that Mindpath College Health, operating in several locations in California, was breached in May 2026.

Industrial Acceptance Corporation, offering automotive financing options to customers on the East Coast, has reported a data breach involving sensitive information.

New Jersey-based First Harvest Credit Union has disclosed that a data breach in January 2026 may have compromised sensitive personal information.

Attorneys are investigating claims from threat actor Aurora that testing laboratory Advanta Genetics was breached in April 2026.

Acadia Healthcare Company, operating a nationwide network of behavioral health centers, has reported a March 2026 data breach involving sensitive information.

NetLine Corporation, which operates a business-to-business marketing platform, has reported an April 2026 data breach that could have exposed sensitive information.

Ermi, an orthopedic medical device and treatment program company, has reported a 2025 data breach that may have exposed sensitive information.

Interstate Management Company, a hospitality group that has merged with and now operates as Aimbridge Hospitality, has reported a November 2025 data breach.

Attorneys are investigating reports that Missouri-based Columbia Orthopaedic Group suffered a data breach in May 2026 at the hands of threat actor LockBit.

Metropolitan Marine Maintenance Contractors' Association, representing employees working in New York and New Jersey harbors, has reported a data breach involving personal information.

The National Center for Construction Education and Research has reported a data breach involving sensitive personal information.

Barnhart Crane & Rigging Company, with over 70 locations in the U.S. and Canada, has reported an April 2025 data breach that may have compromised sensitive personal information.

Stellar Health Group, which operates seven long- and short-term care facilities in Massachusetts and Vermont, has reportedly suffered a May 2026 data breach.

California-based Palomar Health Medical Group (PHMG) has disclosed that a data breach affecting a third-party associate may have impacted sensitive PHMG information.

Houston Eye Associates, with 18 locations in the Greater Houston area, has reportedly suffered a data breach that may have put sensitive information at risk.

R&G Brenner, a tax and financial services company operating in and around New York City, has reported a data breach potentially compromising personal information.

Glendora Surgery Center, operating in California, has reported a November/December 2025 data breach potentially impacting medical information.

US Tiger Securities, a fintech brokerage firm that does business as Tiger Brokers, has reported a July 2025 data breach.

Cresset Capital Management, a wealth management company operating nationwide, has reported a data breach that exposed sensitive personal information.

Advanced Family Surgery Center, located in Oak Ridge, Tennessee, has disclosed a November 2025 data breach that may have exposed sensitive information.

Excelas, a medical record organization and analysis company, has disclosed a late 2025 data breach that may have exposed sensitive personal information.

Community Bank, a commercial and retail bank providing service to Pennsylvania, Ohio, and West Virginia, has disclosed a May 2026 data breach that may have exposed sensitive customer information.

TransGlobal Insurance Agency has reported a February 2026 data breach that may have compromised sensitive personal information.

Aligned Orthopedic Partners, which has locations in Washington, D.C., Maryland and Virginia, has disclosed a November/December 2025 data breach that may have exposed personal and medical information.

M&T Bank, operating over 1,000 branches and ATM-only locations on the East Coast, has reported that a third party's August 2025 data breach impacted customer personal information.

Eyemart Express, a prescription eyewear retailer with over 250 stores nationwide, has reported a data breach exposing personal and medical information.

Elmwood Healthcare, a home healthcare network operating in Rhode Island and Massachusetts, has disclosed a January/February 2026 data breach that may have exposed sensitive personal and medical data.

P3 Global Intel, which operates P3 Campus, an anonymous tip submission platform used by over 35,000 schools, is reported to have suffered a data breach compromising sensitive information.

Secure Health, a third-party administrator based in Georgia, has confirmed that a data breach occurring within or before February 2026 may have compromised personal information.

Pediatric Products, which sells pediatric respiratory products as Xpress Nebs, has reported a data breach discovered in February 2026 that may have exposed personal and medical information.

California-based SAFE Credit Union has announced a December 2025 data breach involving members’ personal and financial information.

Center for Life Resources, based in Brownwood, Texas, has reported that a November 2025 data breach may have exposed personal and protected health information.

Reproductive Medicine Associates of Michigan (RMA of Michigan) is investigating a data breach discovered in October 2025 that potentially exposed health information.

Wisconsin-based CoVantage Credit Union has disclosed an August 2025 data breach involving third-party vendor Marquis Software Solutions.

Lemonade reported that roughly 190,000 driver's license numbers may have been exposed due to an issue with the company's online car insurance application.

Avis Rent A Car System LLC is sending notice of an August 2024 data breach that may have exposed individuals’ personal and financial information.