Consumer Privacy & Data Breaches

On September 30, 2022, Chemonics International, Inc. filed notice of a data breach with various state government entities after the company learned that an unauthorized party had gained access to sensitive consumer data stored on its servers. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names, Social Security numbers, financial account numbers, medical information, health insurance information,

On September 28, 2022, focusIT, Inc. filed notice of a data breach with the Attorney General of Montana after an unauthorized party gained access to the company’s computer network. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names, Social Security numbers, addresses and dates of birth. After confirming that consumer data was leaked, focusIT began sending out

On September 23, 2022, Physician’s Business Office (“PBO”) filed notice of a data breach with several Attorney General Offices after the company learned that an unauthorized party had gained access to the PBO computer system. Based on the company’s official filing, as well as information provided in a notice posted on the PBO website, the incident resulted in an unauthorized party gaining access to consumers’ names, addresses,

On September 30, 2022, Anthem MaineHealth (“AMH Health”) filed notice of a data breach with the Office of the Maine Attorney General after the company learned that patient data was leaked related to a data security incident at Choice Health, one of AMH Health’s vendors. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names, Social Security numbers,

On September 28, 2022, Northern California Fertility Medical Center (“NCFMC”) filed notice of a data breach with various state attorneys’ general offices after the company experienced what appears to have been a ransomware attack. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names and protected health information. After confirming that consumer data was leaked, NCFMC began sending out

On September 16, 2022, Country Doctor Community Clinic (“CDCC”) filed notice of a data breach with the U.S. Department of Health and Human Services Office for Civil Rights after the company experienced a hacking/IT incident. However, news of the Country Doctor Community Doctor Clinic breach is still fresh, and the company has yet to post notice of the incident on its website. Thus, it remains unknown what

On September 15, 2022, the Neurology Center of Nevada (“NCNV”) reported a data breach with the U.S. Department of Health and Human Services Office for Civil Rights, impacting the sensitive information of 11,700 patients. Based on an official filing from the company, the incident resulted in an unauthorized party gaining access to the following data belonging to certain patients: full names, addresses, dates of birth, genders,

On September 23, 2022, FMC Services, LLC (“FMC”) reported a data breach with the U.S. Department of Health and Human Services Office for Civil Rights after the company was the target of a recent cyberattack. Based on an official filing from the company, the incident resulted in an unauthorized party gaining access to the following data types: names, mailing addresses, dates of birth, Social Security numbers,

On September 23, 2022, Diodes Incorporated reported a data breach with the Attorney General of Texas after sensitive consumer information that was entrusted to the company was leaked to an unauthorized party. Based on an official filing from the company, the incident resulted in an unauthorized party gaining access to the following data types: names, addresses, Social Security numbers, driver’s license numbers, state identification numbers, health

On September 23, 2022, Apex Capital Corp. filed notice of a data breach with the Attorney General of Texas after the company learned that a data breach compromised the sensitive information of certain consumers that was entrusted to Apex Capital. Based on an official filing from the company, the incident resulted in an unauthorized party gaining access to the following data types: names, addresses and Social Security

On September 21, 2022, Humana reported a data breach with the Office of the Maine Attorney General after the company learned through one of its vendors that certain customers’ information was leaked after an apparent ransomware attack targeting the vendor’s computer system. Based on an official filing from the company, the incident resulted in an unauthorized party gaining access to the following data types: first and last

On August 25, 2022, New York Racing Association (“NYRA”) reported a data breach with the Office of the Vermont Attorney General after the organization experienced a ransomware attack targeting sensitive information on its computer network. Based on an official filing from the company, the incident resulted in an unauthorized party gaining access to the following information related to some current and former employees: first and last names,

On September 2, 2022, Reiter Affiliated Companies, LLC (“Reiter”) reported a data breach with the U.S. Department of Health and Human Services Office for Civil Rights after the company detected unauthorized activity on its computer network. Based on the company’s filing with the Health and Human Services Office for Civil Rights, the incident resulted in consumers’ names, Social Security numbers and dates of birth being compromised.  After

On September 16, 2022, Berry, Dunn, McNeil & Parker, LLC reported a data breach with the Montana Attorney General’s Office after the company learned that an unauthorized party had gained access to an employee’s email account. The official filing from the company does not indicate what type of data was leaked; however, based on state data breach reporting requirements, it appears likely that the breach involved consumers’

On September 13, 2022, City Furniture, Inc. reported a data breach stemming from an incident that compromised the security of sensitive information entrusted to the company. Because news of the City Furniture data breach only recently broke, the company has yet to confirm what data types were leaked as a result of the incident. However, based on reporting requirements in Massachusetts, where City Furniture filed notice of