Consumer Privacy & Data Breaches

On October 11, 2022, BBRG TR, LLC, as well as several other seemingly related entities, including BBRG Woburn, LLC, BBRG Waterfront, LLC, and BBRG Newport, LLC, filed a notice of a data breach with the Attorney General of Massachusetts after an unauthorized party was able to gain access to the companies’ computer networks. Based on the company’s official filing, the incident resulted in an unauthorized party gaining

On October 7, 2022, Lake Nona Estates Management filed notice of a data breach with the Vermont Attorney General after the company confirmed that an unauthorized party had gained access to portions of its network that contained confidential consumer information. However, because Lake Nona Estates has not yet posted notice of the breach on its website and has not otherwise clarified what data was leaked, it remains

On October 7, 2022, GEE Group, Inc. filed a notice of a data breach with the Office of the Vermont Attorney General after the company experienced a data security incident that compromised sensitive information belonging to certain individuals that was stored on the company’s computer system. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names, addresses, birth dates

On October 10, 2022, The Scoular Company filed notice of a data breach with the Montana Attorney General after an incident where an unauthorized party was able to gain access to sensitive consumer information stored on the company’s computer system. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names, dates of birth, Social Security numbers, driver’s license

On September 2, 2022, Buffalo MRI by Windsong Radiology reported a data breach with the Attorney General of Montana after the company experienced a “security incident” that compromised patient information. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names, addresses, dates of birth, Social Security numbers, health insurance information, medical record number, patient account number, physician name,

On October 6, 2022, Eventus WholeHealth, PLLC (“Eventus”) filed notice of a data breach with the Attorney General of Montana after an unauthorized individual gained access to an employee’s email account containing sensitive consumer information. While the company has yet to release the specific data that was leaked as a result of the data security incident, based on state data breach reporting requirements, it likely involved one

On October 5, 2022, Valle del Sol, Inc. filed notice of a data breach with the Montana Attorney General after the company experienced a data security incident affecting sensitive information belonging to certain individuals. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names, dates of birth, Social Security numbers, driver’s license numbers, clinical or diagnosis information, health

On October 3, 2022, Mativ Holdings, Inc. filed a notice of a data breach with several state attorneys general offices after an unauthorized party blocked the company’s access to part of its network. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names, dates of birth, medical information, financial account numbers, and Social Security numbers. After confirming that

On October 7, 2022, Washington Federal Bank (“WaFd”) filed notice of a data breach with the Texas Attorney General’s Office following an incident in which sensitive consumer information was accessible to an unauthorized party. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names, addresses, and financial account information. After confirming that consumer data was leaked, WaFd began

On September 23, 2022, Resource Anesthesia of California filed notice of a data breach with the U.S. Department of Health and Human Services Office for Civil Rights after the practice experienced a Network IT/ Hacking incident impacting sensitive information patients entrusted to the organization. However, because information about the Resource Anesthesia breach is limited, it has not yet been confirmed how the incident occurred or what information

On October 6, 2022, Massachusetts Mutual Life Insurance Company reported a data breach with the Texas Attorney General’s Office after sensitive consumer information that had been entrusted to the company was subject to unauthorized access. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names, addresses, Social Security numbers, driver’s license numbers, state identification numbers, and financial account

On October 6, 2022, Amerigroup Insurance Company reported a data breach with the Texas Attorney General after sensitive information entrusted to the company was discovered to have been accessible to an unauthorized party. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names, addresses, Social Security numbers, and health insurance information. After confirming that consumer data was leaked,

October 7, 2022 – Recently, Northern Data Systems, Inc. filed notice of a data breach with the Massachusetts Attorney General after an unauthorized party was able to gain access to the company’s IT network. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names, Social Security numbers, phone numbers, addresses, driver’s license numbers, medical information and financial information.

On October 4, 2022, Columbia River Mental Health Services filed notice of a data breach with the Montana Attorney General after the company learned that an unauthorized party gained access to employee email accounts for a period of more than a year. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names, addresses, Social Security numbers, driver’s license

On September 21, 2022, Mount Vernon Mills filed notice of a data breach with the office of the Maine Attorney General after the company learned it was the target of a recent cyberattack. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to the names, Social Security Numbers, birth dates, and addresses of employees, retirees and beneficiaries who participate in or