Recent cyber attacks and data breaches

Shoshone Medical Center, a healthcare provider in ID, reported a breach of health information affecting 553 people to the US Department of Health and Human Services on August 25, 2026. HHS records the breach type as hacking/it incident, involving email.

Museum Associates d/b/a Los Angeles Museum of Art (LACMA) notified the California Attorney General of a data breach on August 24, 2026, with the breach dated July 7, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

Allied Health notified the California Attorney General of a data breach on August 24, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

Pan American Group LLC notified the Washington State Attorney General on August 24, 2026 of a data breach that occurred on April 8, 2026, affecting 12,309 Washington residents. Information involved: Name, Social Security Number, Driver's License or Washington ID Card Number, Financial & Banking Information, Full Date of Birth, Unique Private Key (e.g. used to authenticate or sign an electronic record), Student ID Number, Military ID Number, Passport Number, Health Insurance Policy or ID Number, Medical Information, Biometric Data.

In July 2025, the German news service NIUS suffered a data breach which was subsequently leaked publicly . The data included 6k unique email addresses along with names, physical addresses and payment details for purchases including either IBANs or partial credit card data (masked card number, type and expiry).

In mid-2026, hundreds of thousands of user records allegedly sourced from Golf Canada began circulating via Telegram. The data included 569k unique email addresses along with names, usernames, dates of birth, genders and approximate geographic locations (city, province and postcode). It remains unclear whether the data was obtained via unintentionally exposed website features or a security vulnerability.

Grafton City Hospital, Inc., a healthcare provider in WV, reported a breach of health information affecting 1,215 people to the US Department of Health and Human Services on August 22, 2026. HHS records the breach type as hacking/it incident, involving email.

Kern Psychiatric Health and Wellness Center, Inc notified the California Attorney General of a data breach on August 21, 2026, with the breach dated April 16, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

The Health Trust and its subsidiary, FASS notified the California Attorney General of a data breach on August 21, 2026, with the breach dated May 26, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

POLAM Federal Credit Union notified the California Attorney General of a data breach on August 21, 2026, with the breach dated May 20, 2025. The notice covers more than 500 California residents; California does not publish the exact number.