Recent cyber attacks and data breaches

La Perouse LLC notified the California Attorney General of a data breach on May 28, 2026, with the breach dated May 27, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

Blue Teal Holdings, LLC notified the California Attorney General of a data breach on May 28, 2026, with the breach dated October 13, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

Smith & James, CPAs notified the California Attorney General of a data breach on May 28, 2026, with the breach dated March 5, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

Texas Capital notified the Washington State Attorney General on May 28, 2026 of a data breach that occurred on April 26, 2026, affecting 5,134 Washington residents. Information involved: Name, Social Security Number, Full Date of Birth.

In April 2026, the luxury fashion e-commerce platform Mytheresa was listed as a victim of the ShinyHunters "pay or leak" extortion group . After the ransom deadline passed, the group publicly released the data which contained 84k unique email addresses. The exposed data also included names, phone numbers, physical addresses, purchases and partial credit card data including card type, last 4 digits and expiry date.

Ampex Data Systems Corporation notified the California Attorney General of a data breach on May 27, 2026, with the breach dated March 21, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

In March 2026, the financial services firm Ameriprise Financial was named by the ShinyHunters group in a "pay or leak" extortion campaign . The group claimed possession of more than 200GB of compressed data exfiltrated from Ameriprise's Salesforce environment and internal SharePoint infrastructure, and subsequently published the data after negotiations allegedly failed. The published data contained 500k unique email addresses as well as names, phone numbers, physical addresses and employer information. In their disclosure to state attorneys general , Ameriprise reported 47,876 affected people; the larger email address population represents contacts from Ameriprise's broader operational systems, including internal staff. Ameriprise further advised that they have "implemented heightened monitoring of your account(s) to include enhanced identity verification procedures".

ERMI LLC notified the California Attorney General of a data breach on May 26, 2026, with the breach dated February 15, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

Interstate Management Company, LLC notified the California Attorney General of a data breach on May 26, 2026, with the breach dated November 19, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

Nickey Kehoe notified the California Attorney General of a data breach on May 26, 2026, with the breach dated March 29, 2026. The notice covers more than 500 California residents; California does not publish the exact number.