Recent cyber attacks and data breaches

In mid-2026, hundreds of thousands of user records allegedly sourced from Golf Canada began circulating via Telegram. The data included 569k unique email addresses along with names, usernames, dates of birth, genders and approximate geographic locations (city, province and postcode). It remains unclear whether the data was obtained via unintentionally exposed website features or a security vulnerability.

Grafton City Hospital, Inc., a healthcare provider in WV, reported a breach of health information affecting 1,215 people to the US Department of Health and Human Services on August 22, 2026. HHS records the breach type as hacking/it incident, involving email.

Kern Psychiatric Health and Wellness Center, Inc notified the California Attorney General of a data breach on August 21, 2026, with the breach dated April 16, 2026. The notice covers more than 500 California residents; California does not publish the exact number.

The Health Trust and its subsidiary, FASS notified the California Attorney General of a data breach on August 21, 2026, with the breach dated May 26, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

POLAM Federal Credit Union notified the California Attorney General of a data breach on August 21, 2026, with the breach dated May 20, 2025. The notice covers more than 500 California residents; California does not publish the exact number.

ASOS US Sales LLC notified the Washington State Attorney General on August 21, 2026 of a data breach that occurred on July 28, 2026, affecting 1,929 Washington residents. Information involved: Name, Financial & Banking Information, Full Date of Birth, Email Address and Password/Security Question Answers.

Premier Medical Group of the Hudson Valley P.C., a healthcare provider in NY, reported a breach of health information affecting 282,075 people to the US Department of Health and Human Services on August 21, 2026. HHS records the breach type as hacking/it incident, involving network server.

North Dakota Department of Health and Human Services, Developmental Disabilities Section, a healthcare provider in ND, reported a breach of health information affecting 1,750 people to the US Department of Health and Human Services on August 21, 2026. HHS records the breach type as hacking/it incident, involving email.

Allergic Disease Associates, P.C. dba The Asthma Center, a healthcare provider in PA, reported a breach of health information affecting 5,321 people to the US Department of Health and Human Services on August 21, 2026. HHS records the breach type as hacking/it incident, involving network server.

Baraga County Memorial Hospital, a healthcare provider in MI, reported a breach of health information affecting 501 people to the US Department of Health and Human Services on August 21, 2026. HHS records the breach type as hacking/it incident, involving network server.