Recent cyber attacks and data breaches

Psychiatry of Texas PLLC, a healthcare provider in TX, reported a breach of health information affecting 5,902 people to the US Department of Health and Human Services on August 27, 2026. HHS records the breach type as hacking/it incident, involving network server.

Murfreesboro Medical Clinic notified the California Attorney General of a data breach on August 26, 2026, with the breach dated December 2, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

In August 2026, clothing retailer Carhartt was the target of a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data allegedly obtained from the company including 12.9M unique email addresses, names, phone numbers and physical addresses. The published corpus also contained millions of synthetic records that did not relate to real individuals and were excluded from the breach.

Livara Health Medical Group - dba SpineZone notified the California Attorney General of a data breach on August 25, 2026, with the breach dated December 2, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

Together Women's Health LLC - Aesto notified the California Attorney General of a data breach on August 25, 2026, with the breach dated December 2, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

Shoshone Medical Center, a healthcare provider in ID, reported a breach of health information affecting 553 people to the US Department of Health and Human Services on August 25, 2026. HHS records the breach type as hacking/it incident, involving email.

Museum Associates d/b/a Los Angeles Museum of Art (LACMA) notified the California Attorney General of a data breach on August 24, 2026, with the breach dated July 7, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

Allied Health notified the California Attorney General of a data breach on August 24, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

Pan American Group LLC notified the Washington State Attorney General on August 24, 2026 of a data breach that occurred on April 8, 2026, affecting 12,309 Washington residents. Information involved: Name, Social Security Number, Driver's License or Washington ID Card Number, Financial & Banking Information, Full Date of Birth, Unique Private Key (e.g. used to authenticate or sign an electronic record), Student ID Number, Military ID Number, Passport Number, Health Insurance Policy or ID Number, Medical Information, Biometric Data.

In July 2025, the German news service NIUS suffered a data breach which was subsequently leaked publicly . The data included 6k unique email addresses along with names, physical addresses and payment details for purchases including either IBANs or partial credit card data (masked card number, type and expiry).