Recent cyber attacks and data breaches

City of Foster City notified the California Attorney General of a data breach on July 13, 2026, with the breach dated February 28, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

Cabot Packing LLC notified the California Attorney General of a data breach on July 13, 2026, with the breach dated June 5, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

HMC Fresh Foods, LLC notified the California Attorney General of a data breach on July 13, 2026, with the breach dated June 5, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

McClarty Farms LLC notified the California Attorney General of a data breach on July 13, 2026, with the breach dated June 5, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

Surplus Line Association of California notified the California Attorney General of a data breach on July 13, 2026, with the breach dated April 4, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

The Washington Post (Oracle) notified the Washington State Attorney General on July 13, 2026 of a data breach that occurred on July 10, 2025, affecting 514 Washington residents. Information involved: Name, Social Security Number, Financial & Banking Information, Passport Number, Health Insurance Policy or ID Number.

Youth Home, Inc., a healthcare provider in AR, reported a breach of health information affecting 689 people to the US Department of Health and Human Services on July 13, 2026. HHS records the breach type as hacking/it incident, involving email.

Alpine Agency of the Midlands, LLC, a business associate in SC, reported a breach of health information affecting 500 people to the US Department of Health and Human Services on July 13, 2026. HHS records the breach type as hacking/it incident, involving email.

Madera Community Hospital, a healthcare provider in CA, reported a breach of health information affecting 150,810 people to the US Department of Health and Human Services on July 13, 2026. HHS records the breach type as hacking/it incident, involving network server.

In June 2026, Glendale Community College was the target of a ShinyHunters "pay or leak" extortion campaign . Data allegedly obtained from Glendale was later published online and included almost 800k unique email addresses along with various other data fields, including names, addresses, phone numbers, Social Security numbers and other information relating to student enrolments. In its disclosure notice , the college advised that "the potentially impacted information may vary for each individual and may include all or just one of the above-listed types of information".