January 11, 2023 – After discovering that they had been the target of a ransomware attack on January 10, 2023, Maternal & Family Health Services, Inc. (“Maternal & Family”) filed a notice of data breach with several attorney general offices. According to the filing, an unauthorized third party gained access and leaked information. The information that had been leaked was consumers’ first and last names, dates of

January 11, 2023 – Elevate Services, Inc. filed notice of a data breach with the Attorney General of California on December 28, 2022 after discovering that consumer information had been leaked in a ransomware attack. According to the filing, information accessed included consumers’ first and last names, Social Security numbers, dates of birth, medical history, claims history, compensation information, and addresses. Once Elevate confirmed the data

January 11, 2023 – Fidelity Building Services Group filed notice of a data breach with the Texas Attorney General on January 6, 2023 after confidential information was compromised by an unauthorized third party. According to the filing, the information that was accessed included first and last names, driver’s license numbers, government-issued identification numbers, and Social Security numbers. Once Fidelity confirmed the data breach, it sent notification

January 9, 2023 – SAIF Corporation filed notice of a data breach with the Texas Attorney General on January 6, 2023 after learning of an incident involving unauthorized access of a third party. According to the filing, the information that was accessed included worker’s compensation claimants’ first and last names, driver’s license numbers, financial account information, Social Security numbers, medical history information, and insurance policy information.

January 8, 2023 – After discovering unusual activity on its computer network in December 2022, Wabtec Corporation posted a notice on its website. According to the notice, the malware attack resulted in the release of consumer information such as names, protected health information, financial information, criminal history, Social Security numbers and much more. Once it was confirmed that there was a data leak, Wabtec sent out notification

January 8, 2023 – The Robins & Morton Group filed notice of a data breach with the Attorney General of Montana on December 22, 2022 after discovering that consumer information had been accessed by an unauthorized party. According to the filing, information accessed included consumers’ first and last names and Social Security numbers. Once Robins & Morton confirmed the data breach, it sent notification letters to

January 8, 2023 – Howard Memorial Hospital announced a data breach on its website on December 29, 2022. According to the notice, the hospital received reports of a cyberattack on its computer network resulting in stolen patient and employee information. The current and former employee information that was accessed was full names, Social Security numbers, dates of birth, contact information, and direct deposit bank account information.

January 7, 2023 – Five Guys Enterprises, LLC filed notice of a data breach with several attorney generals throughout the country on December 29, 2022 after job applicants’ information was exposed to unauthorized parties in a cyberattack. According to the filing, the information that was accessed included first and last names, driver’s license numbers, financial account information, and Social Security numbers. Once Five Guys confirmed the

January 6, 2023 – Fitzgibbon Hospital filed notice of a data breach on December 30, 2022 with the U.S. Department of Health and Human Services Office for Civil Rights after determining that a security incident had leaked patient information of 112,072 individuals. According to the filing, patient information that was accessed included first and last names, Social Security numbers, financial account information, driver’s license numbers,

January 6, 2023 – Retreat Behavioral Health filed notice of a data breach on December 30, 2022 with the Vermont Attorney General after determining that patients’ information was leaked in a ransomware attack. Information that was accessed included protected health information. According to the filing, an unauthorized party gained access to patient information, including Social Security numbers and admission information. After confirming that there was a data

January 5, 2023 – Metropolitan Area EMS Authority, dba Medstar Mobile Healthcare, filed notice of a data breach on December 19, 2022 with the U.S. Department of Health and Human Services for Civil Rights after determining that the information of 612,000 patients was leaked after being hacked. Information that was accessed included protected health information. After confirming that there was a data leak, Medstar sent out notification

January 5, 2023 – Bay Bridge Administrators, LLC (“BBA”) filed notice of a data breach with the Massachusetts Attorney General on December 29, 2022, after sensitive information was exposed to unauthorized parties on its computer network. According to the filing, the information that was accessed included consumers’ first and last names and Social Security numbers. Once there was confirmation of the data breach, BBA sent notification

December 30, 2022 – After a ransomware attack exposed sensitive patient information in their possession, Monarch filed notice of a data breach with the Massachusetts Attorney General and the U.S. Department of Health and Human Services Office for Civil Rights on December 16, 2022. According to the filing, an unauthorized party gained access to patient information such as full names, Social Security numbers, and protected health

December 30, 2022 – After a ransomware attack that exposed sensitive consumer information in their possession, FoundCare, Inc. filed notice of a data breach with the U.S. Department of Health and Human Services Office for Civil Rights on December 16, 2022. According to the filing, an unauthorized party gained access to patient information through employee email accounts. The information that was accessed was patients’ full names, dates

December 30, 2022 – After a “security incident” involving sensitive student information being compromised, Cincinnati State Technical Community College filed notice of a data breach with the Montana Attorney General on December 23, 2022.

According to the filing, an unauthorized party gained access to student information like full names and Social Security numbers, dates of birth, addresses, driver’s license of state ID numbers, financial account information,