January 29, 2023 – After a ransomware attack exposed sensitive student and faculty information in their possession, Stratford University filed notice of a data breach with the Maine Attorney General on January 26, 2023. According to the filing, an unauthorized party gained access to consumers’ full names, Social Security numbers, addresses, phone numbers, dates of birth, email addresses, passport numbers, and student identification numbers. Once there

January 28, 2023 – Matco Tools Corporation filed a notice of a data breach with the Attorney General of Maine on January 26, 2023 after a data security incident on the company’s computer network. According to the filing, an unauthorized party gained access to sensitive consumer information, including consumers’ names and Social Security numbers. Once the leak was confirmed, Matco sent notification letters to all 14,342

January 28, 2023 – mscripts, LLC filed a notice of data breach with the U.S. Department of Health and Human Services Office for Civil Rights on January 17, 2023 after an unauthorized party gained access to consumer information. Per the filing, confidential consumer information, including protected health information, was leaked. Mscripts confirmed the leak and began sending out notification letters to 66,372 individuals affected by the data

January 27, 2023 – University of Colorado Hospital Authority (“UCHealth”) filed a notice of data breach with the U.S. Department of Health and Human Services Office for Civil Rights on January 17, 2023 after learning of a data security incident involving Diligent Corporation, one of the company’s vendors. The company posted a notice on its website stating that confidential consumer information was exposed, including full names, dates

January 27, 2023 – Lutheran Social Services of Illinois filed a data breach notice with the Maine Attorney General on January 25, 2023 after learning of a ransomware attack on the company’s computer network. According to the filing, an unauthorized party gained access to sensitive consumer information like first and last names, Social Security numbers, dates of birth, driver’s license numbers, medical information, financial account information,

January 26, 2023 –

Jefferson County Health Center d/b/a Jefferson County Health, filed a notice of a data breach on January 13, 2023 with the U.S. Department of Health and Human Services Office for Civil Rights after discovering a security incident in which an unauthorized party gained access to confidential patient information on the company’s computer network. After confirming the data leak, Jefferson County sent notification letters

January 25, 2023 – Livingston Memorial VNA and affiliated companies Livingston Memorial Visiting Nurse Association and Livingston Caregivers, collectively known as “Livingston Memorial,” filed a notice of a data breach with the Attorney General of Montana on January 20, 2023 after learning of a ransomware attack on its computer network. According to the filing, an unauthorized party gained access to confidential consumer information. The company has not

January 25, 2023 – Bank of Eastern Oregon (“BEO”) filed a notice of a data breach with the Montana Attorney General on January 20, 2023 after company email accounts were accessed by an unauthorized third party. According to the filing, sensitive consumer information was accessed, but we don’t yet know the type of information accessed. After confirming the leak, BEO sent data breach notification letters to all

January 24, 2023 – Satellite Healthcare filed a notice of data breach on January 20, 2023 with the Attorney General of Texas after discovering a security incident in which an unauthorized party gained access to confidential information on the company’s computer network. Information accessed was consumers’ full names, protected health information, and financial account information. After confirming the data leak, Satellite sent notification letters to all

January 24, 2023 – Members Trust of the Southwest Federal Credit Union (“Members Trust”) filed notice of a data breach on January 20, 2023 with the Texas Attorney General after determining that an unauthorized party had gained access to confidential consumer information. According to the filing, consumer information accessed was names, Social Security numbers, driver’s license numbers, addresses, protected health information, and financial account information. After

January 21, 2023 – After discovering that confidential consumer information had been accessed by an unauthorized party, Insulet Corporation filed a data breach notice with the California Attorney General on January 5, 2023. According to the filing, consumers’ protected health information had been accessed. Once confirmed that there was a consumer data leak, Insulet sent out notification letters to all individuals affected by the data security breach.

January 20, 2023 – PayPal, Inc. filed a notice of data breach with the Attorney General of Maine on January 18, 2023 after discovering that consumer information had been leaked to an unauthorized party in a credential stuffing attack. According to the filing, information accessed included consumers’ first and last names, Social Security numbers, addresses, dates of birth, and individual tax identification numbers. Once PayPal confirmed

January 20, 2023 – Farmers Investment Company, dba Green Valley Pecan Company, filed notice of a data breach with the Maine Attorney General’s office on January 18, 2023 after consumer information was exposed to unauthorized parties in a security incident. According to the filing, the information that was accessed included first and last names, driver’s license numbers, Social Security numbers, financial information, medical information, and health

January 17, 2023 – Home Care Providers of Texas, referred to as “HCPT,” filed notice of a data breach on January 13, 2023 with the Texas Attorney General after discovering a security incident in which an unauthorized party gained access to confidential information on the company’s computer network. Information accessed was consumers’ full names, dates of birth, addresses, Social Security numbers, medication information, and diagnosis and

January 16, 2023 – Hayward Sisters Hospital, doing business as St. Rose Hospital, filed a notice of data breach on January 12, 2023 with the California Attorney General’s office after discovering that confidential patient information had been accessed and removed from the hospital’s computer system. According to the filing, patient information that was accessed included full names, dates of birth, home addresses, Social Security numbers, and