Recent cyber attacks and data breaches

CTS Journey Holdings, LLC, a Delaware limited liability comp notified the Washington State Attorney General on August 3, 2026 of a data breach that occurred on December 3, 2025, affecting 2,226 Washington residents. Information involved: Name, Social Security Number, Driver's License or Washington ID Card Number, Financial & Banking Information, Full Date of Birth, Passport Number, Medical Information.

PAMCAH-UA Local 675 Health and Welfare Fund, a health plan in HI, reported a breach of health information affecting 8,319 people to the US Department of Health and Human Services on August 3, 2026. HHS records the breach type as hacking/it incident, involving email.

In July 2026, the Russian VPN service SplitVPN (previously known as NotVPN) suffered a data breach . The incident exposed millions of customer records, including 865k unique email addresses. Other impacted data included IP addresses, the user's country, and partial payment card data (first 6 and last 4 digits plus expiry date).

Everside Health notified the California Attorney General of a data breach on July 31, 2026, with the breach dated December 2, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

Stanislaus County Health Services Agency notified the California Attorney General of a data breach on July 31, 2026, with the breach dated December 2, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

Everside Health (Aesto, LLC) notified the Washington State Attorney General on July 31, 2026 of a data breach that occurred on December 2, 2025, affecting 21,308 Washington residents. Information involved: Name, Social Security Number, Full Date of Birth, Medical Information.

Asheville Beaverdam NC Opco LLC d/b/a Bear Mountain Health and Rehabilitation, a healthcare provider in NC, reported a breach of health information affecting 1,397 people to the US Department of Health and Human Services on July 31, 2026. HHS records the breach type as hacking/it incident, involving electronic medical record, network server.

Asheville Victoria NC Opco LLC d/b/a Elevate Health & Rehabilitation, a healthcare provider in NC, reported a breach of health information affecting 1,551 people to the US Department of Health and Human Services on July 31, 2026. HHS records the breach type as hacking/it incident, involving desktop computer, network server.

Asheville US Seventy NC Opco LLC d/b/a Swannanoa Valley Health and Rehabilitation, a healthcare provider in NC, reported a breach of health information affecting 1,045 people to the US Department of Health and Human Services on July 31, 2026. HHS records the breach type as hacking/it incident, involving desktop computer, network server.

Monongalia County General Hospital Company, a healthcare provider in WV, reported a breach of health information affecting 2,173 people to the US Department of Health and Human Services on July 31, 2026. HHS records the breach type as hacking/it incident, involving email.