Recent cyber attacks and data breaches

Madera Community Hospital, a healthcare provider in CA, reported a breach of health information affecting 150,810 people to the US Department of Health and Human Services on July 13, 2026. HHS records the breach type as hacking/it incident, involving network server.

In June 2026, Glendale Community College was the target of a ShinyHunters "pay or leak" extortion campaign . Data allegedly obtained from Glendale was later published online and included almost 800k unique email addresses along with various other data fields, including names, addresses, phone numbers, Social Security numbers and other information relating to student enrolments. In its disclosure notice , the college advised that "the potentially impacted information may vary for each individual and may include all or just one of the above-listed types of information".

Heart Care Centers of Illinois, a healthcare provider in IL, reported a breach of health information affecting 52,562 people to the US Department of Health and Human Services on July 10, 2026. HHS records the breach type as hacking/it incident, involving email.

Sunshine Health, a health plan in FL, reported a breach of health information affecting 41,569 people to the US Department of Health and Human Services on July 10, 2026. HHS records the breach type as hacking/it incident, involving laptop, network server.

Health Payment Systems, Inc., a business associate in WI, reported a breach of health information affecting 9,380 people to the US Department of Health and Human Services on July 10, 2026. HHS records the breach type as hacking/it incident, involving email.

Lincoln Technical Institute notified the California Attorney General of a data breach on July 9, 2026, with the breach dated April 29, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

Frederick Goldman, Inc notified the Washington State Attorney General on July 9, 2026 of a data breach that occurred on June 11, 2026, affecting 1 Washington residents. Information involved: Name, Social Security Number.

Columbia Machine, Inc. notified the Washington State Attorney General on July 9, 2026 of a data breach that occurred on March 27, 2026, affecting 1,276 Washington residents. Information involved: Name, Social Security Number, Driver's License or Washington ID Card Number, Full Date of Birth, Passport Number.

Claremedica Viking, LLC, a healthcare provider in FL, reported a breach of health information affecting 675 people to the US Department of Health and Human Services on July 8, 2026. HHS records the breach type as hacking/it incident, involving email.

Hudson Valley Medical Billing & Credentialing, LLC, a business associate in NY, reported a breach of health information affecting 5,459 people to the US Department of Health and Human Services on July 7, 2026. HHS records the breach type as hacking/it incident, involving desktop computer, network server.