Recent cyber attacks and data breaches

Texollini, Inc. notified the California Attorney General of a data breach on May 29, 2026, with the breach dated February 16, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

Educational Employees Credit Union notified the California Attorney General of a data breach on May 29, 2026, with the breach dated December 15, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

RCI Internet Services notified the California Attorney General of a data breach on May 29, 2026, with the breach dated March 23, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

Zalaznik & Associates, PLLC notified the Washington State Attorney General on May 29, 2026 of a data breach that occurred on September 22, 2025, affecting 685 Washington residents. Information involved: Name, Social Security Number, Financial & Banking Information.

IMA Diligence Services, LLC notified the Washington State Attorney General on May 29, 2026 of a data breach that occurred on December 8, 2025, affecting 1,977 Washington residents. Information involved: Name, Social Security Number, Driver's License or Washington ID Card Number, Financial & Banking Information, Full Date of Birth, Health Insurance Policy or ID Number, Medical Information.

Lakewood School District notified the Washington State Attorney General on May 29, 2026 of a data breach that occurred on March 19, 2026, affecting 1,006 Washington residents. Information involved: Name, Social Security Number, Driver's License or Washington ID Card Number, Financial & Banking Information.

Fulcrum Real Estate Services, Inc. notified the Washington State Attorney General on May 29, 2026 of a data breach, affecting 1,360 Washington residents. Information involved: Name, Social Security Number, Driver's License or Washington ID Card Number, Financial & Banking Information, Health Insurance Policy or ID Number, Medical Information.

Eastern Washington University notified the Washington State Attorney General on May 29, 2026 of a data breach that occurred on April 29, 2026. Information involved: Student ID Number.

Networking Technology, INC. (RXNT) notified the Washington State Attorney General on May 29, 2026 of a data breach that occurred on May 1, 2026, affecting 1,215 Washington residents. Information involved: Name, Social Security Number, Full Date of Birth, Medical Information, Protected Health Information owned or licensed by a HIPAA covered entity.

In May 2026, the telecommunications company Charter Communications (the parent company behind the consumer broadband and cable brand Spectrum) was named by the ShinyHunters group in a "pay or leak" extortion campaign . The group later published the data, which exposed 4.9M unique email addresses along with names, phone numbers and physical addresses. A subset of approximately 85k records originating from an internal employee directory also included job titles. Charter confirmed the incident, but stated that no sensitive personal information or customer proprietary network information (CPNI) was exfiltrated.