Recent cyber attacks and data breaches

Champaign-Urbana Public Health District, a healthcare provider in IL, reported a breach of health information affecting 501 people to the US Department of Health and Human Services on July 6, 2026. HHS records the breach type as hacking/it incident, involving network server.

In June 2026, Moody Bible Institute was targeted by a ShinyHunters "pay or leak" extortion campaign . Over 2.3M unique email addresses and other personal data were later published publicly, including names, physical addresses, phone numbers, dates of birth and other information relating to donors, supporters, students and alumni. In their disclosure notice , Moody advised that they had "engaged both internal and external cybersecurity experts to thoroughly investigate the matter".

1Life Healthcare, Inc. (One Medical, Iora Health) notified the Washington State Attorney General on July 3, 2026 of a data breach that occurred on June 8, 2026, affecting 16,884 Washington residents. Information involved: Name, Social Security Number, Full Date of Birth, Health Insurance Policy or ID Number, Medical Information, Protected Health Information owned or licensed by a HIPAA covered entity.

Alta Orthopaedics Medical Group, Inc., a healthcare provider in PA, reported a breach of health information affecting 24,496 people to the US Department of Health and Human Services on July 3, 2026. HHS records the breach type as hacking/it incident, involving network server.

TriWest Healthcare Alliance notified the California Attorney General of a data breach on July 2, 2026, with the breach dated April 17, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

Rodenburg Law Firm notified the California Attorney General of a data breach on July 2, 2026, with the breach dated August 26, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

Child Care Resource Center notified the California Attorney General of a data breach on July 2, 2026, with the breach dated October 4, 2016. The notice covers more than 500 California residents; California does not publish the exact number.

Markel Insurance notified the California Attorney General of a data breach on July 2, 2026, with the breach dated March 17, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

L.A. Care Health Plan notified the California Attorney General of a data breach on July 2, 2026, with the breach dated October 31, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

Evergreen Children’s Association, dba Kids Co. notified the Washington State Attorney General on July 2, 2026 of a data breach that occurred on November 11, 2025, affecting 511 Washington residents. Information involved: Name, Social Security Number, Driver's License or Washington ID Card Number, Financial & Banking Information, Passport Number, Health Insurance Policy or ID Number, Medical Information.