Data Breach Lawsuits & Investigations

Received a notice but don’t see the breach listed here? Tell us about it using this form.

Palacio, Palacio & Zimmerman, a Miami-based accounting firm, has reported a data breach involving sensitive personal information.

Impacted Data:
• Social Security Number

Mortgage brokerage firm C2 Financial has reported that a third-party data breach may have compromised sensitive information related to loan applications.

Impacted Data:
• TBD
• Featured

Larry Flynt's Lucky Lady Casino, located in Gardena, California, has disclosed a May 2025 data breach involving sensitive personal information.

Impacted Data:
• Social Security Number
• Date of Birth
• Health Insurance Information
• Passport Number
• Name
• Driver's License or State ID

Karl Auto Group, operating several dealerships in Iowa, has confirmed that a data breach occurring during or before March 2026 may have exposed sensitive information.

Impacted Data:
• Social Security Number
• Financial Account Information
• Name
• Driver's License/Government ID Number
• Passport Number and/or Passport Image

Fintech Holdco, which operates a platform that automates business-to-business sales, has reported a data breach involving sensitive personal information.

Impacted Data:
• Social Security Number
• Featured

Minnesota Epilepsy Group, operating three outpatient clinics and three inpatient locations, has disclosed a March/April 2026 data breach.

Impacted Data:
• Social Security Number
• Date of Birth
• Health Insurance Information
• Address
• Name
• Medical Treatment Information
• Featured

ECBM Data Breach

June 2026
ECBM

ECBM, an insurance company based in Pennsylvania, has reported an October 2024 data breach involving sensitive personal information.

Impacted Data:
• Social Security Number
• Medical Information
• Health Insurance Information
• Driver's License Number
• Financial Account Information
• Name

South Carolina-based McLeod Health has disclosed an October 2025 data breach involving sensitive information belonging to Dillon Family Medicine patients.

Impacted Data:
• Social Security Number
• Date of Birth
• Health Insurance Information
• Treatment Information
• Diagnosis
• Name
• Images
• Medication Information
• Test Results

Plaza Home Mortgage, operating nationally, has confirmed a February 2026 data breach that may have compromised sensitive personal information.

Impacted Data:
• Social Security Number
• Date of Birth
• Address
• Government ID
• Name
• Driver's License
• Mortgage Loan Application and Servicing Information
• Username and Password for Employee Account

Attorneys are investigating claims from ransomware group Termite that UEI College, a network of vocational training and trade schools, was breached in May 2026.

Impacted Data:
• TBD

Clarinda Regional Health Center, operating in Iowa, has confirmed an October 2025 data breach that may have compromised sensitive information.

Impacted Data:
• Social Security Number
• Date of Birth
• Financial Account Number
• Medical Information
• Health Insurance Information
• Driver's License Number
• Taxpayer Identification Number
• Name

Southern Illinois Ob-Gyn Associates has disclosed a data breach discovered in November 2025 that may have compromised personal and protected health information.

Impacted Data:
• Social Security Number
• Date of Birth
• Demographic Information
• Health Information
• Name
• Health Insurance Number

Educational Employees Credit Union, with branches throughout California, has disclosed a December 2025 data breach involving sensitive information.

Impacted Data:
• Social Security Number
• Financial Information
• Driver's License Number
• Address
• Name

KerberRose, a Wisconsin-based accounting firm, has reported an April 2026 data breach that may have compromised sensitive personal information.

Impacted Data:
• Social Security Number
• Date of Birth
• Financial Account Number
• Address
• Bank Account Information
• Name

Industrial Acceptance Corporation, offering automotive financing options to customers on the East Coast, has reported a data breach involving sensitive information.

Impacted Data:
• Social Security Number
• Driver's License Number
• Name

New Jersey-based First Harvest Credit Union has disclosed that a data breach in January 2026 may have compromised sensitive personal information.

Impacted Data:
• Social Security Number
• Financial Account Information
• Payment Card Information
• Name

Ermi Data Breach

May 2026
Ermi

Ermi, an orthopedic medical device and treatment program company, has reported a 2025 data breach that may have exposed sensitive information.

Impacted Data:
• Social Security Number
• Date of Birth
• Financial Information
• Medical Information
• Health Insurance Information
• Driver's License Number
• Name

The National Center for Construction Education and Research has reported a data breach involving sensitive personal information.

Impacted Data:
• Social Security Number
• Name

California-based Palomar Health Medical Group (PHMG) has disclosed that a data breach affecting a third-party associate may have impacted sensitive PHMG information.

Impacted Data:
• Social Security Number
• Date of Birth
• Credit/Debit Card Number
• Health Insurance Information
• Address
• Treatment Information
• Prescription Information
• Medical Record Number
• Subscriber Number
• Username and Password
• Name
• Medical History Information
• Physician Information
• Diagnostic Information
• Disability Information
• Health Insurance Group/Plan Number
• Security Code/PIN Number
• Expiration Date
• Email Address and Password

R&G Brenner, a tax and financial services company operating in and around New York City, has reported a data breach potentially compromising personal information.

Impacted Data:
• Social Security Number
• Credit/Debit Card Number

Community Bank, a commercial and retail bank providing service to Pennsylvania, Ohio, and West Virginia, has disclosed a May 2026 data breach that may have exposed sensitive customer information.

Impacted Data:
• Social Security Number
• Date of Birth
• Name

Texas-based MemberSource Credit Union has disclosed a 2025 data breach that exposed sensitive information.

Impacted Data:
• Social Security Number
• Financial Account Information
• Name
• Driver's License/State ID Number
• Featured

Alta Orthopaedics, operating five practices in California, has disclosed a February 2026 data breach that may have compromised sensitive personal and medical information.

Impacted Data:
• Social Security Number
• Date of Birth
• Health Insurance Information
• Address
• Phone Number
• Email Address
• Provider Name
• Medical Record Number
• Patient Account Number
• Name
• Dates of Service
• Driver's License/State ID Number
• Clinical Information
• Treatment Location
• Reason for Visit
• Medical Diagnosis
• Billing Code
• Cost of Treatment
• Featured

First Advantage, a background screening and identity verification company, has reported a November 2025 data breach that compromised personal information.

Impacted Data:
• Social Security Number
• Driver's License Information
• Featured

Instructure, the edtech company behind learning management system Canvas, has confirmed a May 2026 data breach involving personal information.

Impacted Data:
• Student ID Number
• Email Address
• Username
• Name
• Messages
• Course Name
• Enrollment Information
• Featured

Integrated Pain Associates, operating seven practices in west and central Texas, has disclosed a February 2026 data breach that may have compromised personal and protected health information.

Impacted Data:
• Social Security Number
• Date of Birth
• Health Insurance Information
• Driver's License Number
• Address
• Treatment Information
• Financial Account Information
• Provider Name
• Name
• Medication Information
• Diagnosis/Condition

TransGlobal Insurance Agency has reported a February 2026 data breach that may have compromised sensitive personal information.

Impacted Data:
• Social Security Number
• Date of Birth
• Driver's License Number
• Address
• Name
• Featured

Bayou Title, a commercial and residential closing and escrow agent with 19 offices in Louisiana, is reported to have suffered a potential April 2026 data breach.

Impacted Data:
• TBD

Eyemart Express, a prescription eyewear retailer with over 250 stores nationwide, has reported a data breach exposing personal and medical information.

Impacted Data:
• Social Security Number
• Date of Birth
• Medical Information
• Health Insurance Information
• Driver's License Number
• Address
• Name
• Featured

Fintech company Figure Lending has reported a January 2026 data breach that impacted Social Security numbers and other customer information.

Impacted Data:
• Social Security Number
• Date of Birth
• Address
• Loan Information
• Phone Number
• Email Address
• Name
• Loan Account Number
• Featured

Kaplan Data Breach

March 2026
Kaplan

Kaplan, one of the world's largest providers of education programs and test preparation services, has disclosed a 2025 data breach that compromised sensitive personal information.

Impacted Data:
• Social Security Number
• Driver's License Number
• Name

Wisconsin-based CoVantage Credit Union has disclosed an August 2025 data breach involving third-party vendor Marquis Software Solutions.

Impacted Data:
• Social Security Number
• Date of Birth
• Address
• Financial Account Information
• Phone Number
• Name
• Featured

Prosper Data Breach

September 2025
Prosper

San Francisco-based fintech Prosper has reported a recent data breach involving customer and applicant details.

Impacted Data:
• Social Security Number
• Personal Information

Lemonade reported that roughly 190,000 driver's license numbers may have been exposed due to an issue with the company's online car insurance application.

Impacted Data:
• Driver's License Number
• Featured

Crypto giant Coinbase recently reported that cybercriminals gained access to customers' personal information by bribing overseas support employees to copy data.

Impacted Data:
• Financial Information
• Address
• Phone Number
• Email Address
• Account Information
• Name
• Social Security Number (Last 4 Digits)
• Government ID Image
• Corporate Data
• Featured

PowerSchool, whose cloud-based education software is used by thousands of school districts, has confirmed a data breach that may have exposed students' and teachers' information.

Impacted Data:
• Social Security Number
• Date of Birth
• Contact Information
• Other
• Name
• Medical Alert Information

Avis Rent A Car System LLC is sending notice of an August 2024 data breach that may have exposed individuals’ personal and financial information.

Impacted Data:
• Date of Birth
• Driver's License Number
• Address
• Phone Number
• Email Address
• Credit Card Information
• Name