Recent cyber attacks and data breaches

the West Series of Lockton Companies, LLC notified the California Attorney General of a data breach on June 12, 2026, with the breach dated May 13, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

American Future Technology Corporation d/b/a iBUYPOWER notified the California Attorney General of a data breach on June 12, 2026, with the breach dated June 18, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

Bellflower Unified School District notified the California Attorney General of a data breach on June 12, 2026, with the breach dated July 22, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

Los Angeles County Department of Public Social Services notified the California Attorney General of a data breach on June 12, 2026, with the breach dated January 2, 2024. The notice covers more than 500 California residents; California does not publish the exact number.

Virta Medical PC notified the California Attorney General of a data breach on June 12, 2026, with the breach dated March 19, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

Lumexa Imaging notified the Washington State Attorney General on June 12, 2026 of a data breach that occurred on March 31, 2026, affecting 3,632 Washington residents. Information involved: Name, Social Security Number, Full Date of Birth, Health Insurance Policy or ID Number, Medical Information.

Columbia Pacific Advisors, LLC notified the Washington State Attorney General on June 12, 2026 of a data breach that occurred on November 28, 2025, affecting 1,585 Washington residents. Information involved: Name, Social Security Number, Driver's License or Washington ID Card Number, Financial & Banking Information, Full Date of Birth, Passport Number, Health Insurance Policy or ID Number, Medical Information, Username and Password/Security Question Answers.

In June 2026, the University of Nottingham was the target of a cyber attack , later linked to a ShinyHunters "pay or leak" extortion campaign. Tens of gigabytes of data were subsequently published online and included 455k unique email addresses along with extensive personal information including names, addresses, phone numbers, ethnicities, disabilities, passport numbers and information relating to academic enrolments and fee payments. In a post about the incident , the university advised that the breach affected both "current students, and alumni".

Casino, LLC dba Larry Flynt's Lucky Lady Casino notified the California Attorney General of a data breach on June 10, 2026, with the breach dated May 14, 2025. The notice covers more than 500 California residents; California does not publish the exact number.