Recent cyber attacks and data breaches

Gay & Lesbian Community Services Center of Orange County Inc notified the Washington State Attorney General on June 5, 2026 of a data breach that occurred on December 25, 2025, affecting 1,249 Washington residents. Information involved: Name, Driver's License or Washington ID Card Number, Financial & Banking Information, Full Date of Birth.

In May 2026, the dental benefits administrator DentaQuest was the target of a ShinyHunters "pay or leak" extortion campaign that resulted in the group publicly publishing hundreds of gigabytes of data allegedly obtained from the company. The data included 2.6M unique email addresses along with names, addresses and phone numbers. Much of the data appeared in healthcare enrollment files ( ASC X12 transaction sets ) with some containing Medicaid IDs, while additional data appeared in member records and related files. DentaQuest acknowledged "a cybersecurity incident involving unauthorized access to a limited portion of our network" , and advised they had contained the attack and mitigated the threat.

WellPoint (Independent Clinics of Washington, Elevance Health) notified the Washington State Attorney General on June 2, 2026 of a data breach that occurred on June 24, 2025, affecting 12,017 Washington residents. Information involved: Name, Social Security Number, Driver's License or Washington ID Card Number, Full Date of Birth, Health Insurance Policy or ID Number, Medical Information.

In January 2026, the automotive research and car-shopping platform Edmunds was listed by the ShinyHunters hacking group as having been breached . Data purportedly obtained in the incident was later published publicly and included 178k unique email addresses, usernames, passwords, IP addresses, phone numbers and vehicle-related records.

Fong, Ko & Associates LLP notified the California Attorney General of a data breach on June 1, 2026, with the breach dated June 2, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

Mariner Wealth Advisors, LLC notified the Washington State Attorney General on June 1, 2026 of a data breach that occurred on November 21, 2025, affecting 771 Washington residents. Information involved: Name, Social Security Number, Driver's License or Washington ID Card Number, Financial & Banking Information, Full Date of Birth.

Industrial Acceptance Corporation notified the Washington State Attorney General on June 1, 2026 of a data breach that occurred on February 22, 2025, affecting 679 Washington residents. Information involved: Name, Social Security Number, Full Date of Birth.

Strategic Education Inc. notified the Washington State Attorney General on June 1, 2026 of a data breach that occurred on February 23, 2026, affecting 14,112 Washington residents. Information involved: Name, Social Security Number, Driver's License or Washington ID Card Number, Passport Number.

Morning Star Tours notified the Washington State Attorney General on May 31, 2026 of a data breach that occurred on April 22, 2026, affecting 500 Washington residents. Information involved: Name, Full Date of Birth, Passport Number.

In May 2026, the GTA V and CS2 cheat service Atlas Menu suffered a data breach. An attacker claimed to have gained access to all Atlas systems and published the service's database to a public GitHub repository. The incident exposed 64k unique email addresses along with usernames, IP addresses, support tickets and passwords stored as bcrypt hashes.