Recent cyber attacks and data breaches

Fox Rothschild LLP notified the Washington State Attorney General on July 16, 2026 of a data breach that occurred on May 21, 2026, affecting 1,891 Washington residents. Information involved: Name, Social Security Number, Full Date of Birth.

Lifespan Physician Group of Massachusetts, Inc. d/b/a Brown Health Medical Group-MA, a healthcare provider in MA, reported a breach of health information affecting 311,760 people to the US Department of Health and Human Services on July 16, 2026. HHS records the breach type as hacking/it incident, involving network server.

In July 2026, electronic test and measurement equipment company Fluke was targeted in a ShinyHunters "pay or leak" extortion campaign . The group subsequently published more than 100GB of data allegedly taken from the company. The corpus contained largely corporate contact information, including over 800k unique email addresses, names, phone numbers and physical addresses. A large collection of support cases was also present.

In June 2026, a party claiming to have access to data from Goose Creek Candle Company sent emails to a number of the company's customers , claiming the company had a security vulnerability and suffered a data breach. The data was subsequently sent to Have I Been Pwned and contained 6.6M unique email addresses along with names, phone numbers, physical addresses, order IDs and total spent. The data appears to have been obtained from the company's Shopify instance. Goose Creek is aware of the reports but was unable to provide Have I Been Pwned with any further information at the time of publication.

Ernst & Young LLP notified the California Attorney General of a data breach on July 15, 2026, with the breach dated March 28, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

North Coast Opportunities, Inc. / Redwood Caregiver Resource Center notified the California Attorney General of a data breach on July 15, 2026, with the breach dated June 30, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

Wilmer Cutler Pickering Hale and Dorr LLP notified the Washington State Attorney General on July 15, 2026 of a data breach that occurred on May 8, 2026, affecting 17,253 Washington residents. Information involved: Name, Social Security Number, Full Date of Birth, Student ID Number.

Resource Center of Dallas, Inc., a healthcare provider in TX, reported a breach of health information affecting 12,490 people to the US Department of Health and Human Services on July 15, 2026. HHS records the breach type as hacking/it incident, involving network server.

The Washington Post notified the California Attorney General of a data breach on July 13, 2026, with the breach dated July 10, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

Harbor Developmental Disabilities Foundation (d/b/a Harbor Regional Center) notified the California Attorney General of a data breach on July 13, 2026, with the breach dated March 6, 2026. The notice covers more than 500 California residents; California does not publish the exact number.