Recent cyber attacks and data breaches

JRK Property Holdings, Inc. notified the Washington State Attorney General on July 27, 2026 of a data breach that occurred on March 26, 2026, affecting 5,667 Washington residents. Information involved: Name, Social Security Number, Driver's License or Washington ID Card Number, Financial & Banking Information, Military ID Number, Passport Number, Other.

SPay Inc dba Stack Sports notified the Washington State Attorney General on July 27, 2026 of a data breach that occurred on May 8, 2026, affecting 1,190 Washington residents. Information involved: Name, Financial & Banking Information.

Cornerstone Behavioral Healthcare, a healthcare provider in ME, reported a breach of health information affecting 14,830 people to the US Department of Health and Human Services on July 27, 2026. HHS records the breach type as hacking/it incident, involving network server.

Jeffrey David Reuben, M.D., a healthcare provider in TX, reported a breach of health information affecting 17,017 people to the US Department of Health and Human Services on July 27, 2026. HHS records the breach type as hacking/it incident, involving network server.

The LINE Los Angeles notified the California Attorney General of a data breach on July 24, 2026, with the breach dated September 25, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

Eyemart Express, LLC notified the Washington State Attorney General on July 24, 2026 of a data breach that occurred on February 12, 2026, affecting 1,704 Washington residents. Information involved: Name, Social Security Number, Driver's License or Washington ID Card Number, Financial & Banking Information, Full Date of Birth, Passport Number, Health Insurance Policy or ID Number, Medical Information, Protected Health Information owned or licensed by a HIPAA covered entity.

Brookhaven ENT Allergy and Facial Surgery, a healthcare provider in MS, reported a breach of health information affecting 30,403 people to the US Department of Health and Human Services on July 24, 2026. HHS records the breach type as hacking/it incident, involving electronic medical record, network server.

Vanderbilt University Medical Center, a healthcare provider in TN, reported a breach of health information affecting 3,298 people to the US Department of Health and Human Services on July 24, 2026. HHS records the breach type as hacking/it incident, involving email.

CareCloud, Inc., a business associate in NJ, reported a breach of health information affecting 3,756,469 people to the US Department of Health and Human Services on July 24, 2026. HHS records the breach type as hacking/it incident, involving network server.

Bridgeway Benefit Technologies LLC, a business associate in FL, reported a breach of health information affecting 9,268 people to the US Department of Health and Human Services on July 24, 2026. HHS records the breach type as hacking/it incident, involving email.