Recent cyber attacks and data breaches

Vista Del Mar Child and Family Services, a healthcare provider in CA, reported a breach of health information affecting 500 people to the US Department of Health and Human Services on August 29, 2026. HHS records the breach type as hacking/it incident, involving network server.

Bennett College notified the California Attorney General of a data breach on August 28, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

RB American Group LLC notified the Washington State Attorney General on August 28, 2026 of a data breach that occurred on April 8, 2026, affecting 974 Washington residents. Information involved: Name, Social Security Number, Driver's License or Washington ID Card Number, Financial & Banking Information, Full Date of Birth, Unique Private Key (e.g. used to authenticate or sign an electronic record), Student ID Number, Military ID Number, Passport Number, Health Insurance Policy or ID Number, Medical Information, Biometric Data.

Integrated Specialty Coverages, LLC (“ISC”) notified the California Attorney General of a data breach on August 27, 2026, with the breach dated June 8, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

AnMed Health, a healthcare provider in SC, reported a breach of health information affecting 501 people to the US Department of Health and Human Services on August 27, 2026. HHS records the breach type as hacking/it incident, involving network server.

Psychiatry of Texas PLLC, a healthcare provider in TX, reported a breach of health information affecting 5,902 people to the US Department of Health and Human Services on August 27, 2026. HHS records the breach type as hacking/it incident, involving network server.

Murfreesboro Medical Clinic notified the California Attorney General of a data breach on August 26, 2026, with the breach dated December 2, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

In August 2026, clothing retailer Carhartt was the target of a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data allegedly obtained from the company including 12.9M unique email addresses, names, phone numbers and physical addresses. The published corpus also contained millions of synthetic records that did not relate to real individuals and were excluded from the breach.

Livara Health Medical Group - dba SpineZone notified the California Attorney General of a data breach on August 25, 2026, with the breach dated December 2, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

Together Women's Health LLC - Aesto notified the California Attorney General of a data breach on August 25, 2026, with the breach dated December 2, 2025. The notice covers more than 500 California residents; California does not publish the exact number.