Consumer Privacy & Data Breaches

On August 5, 2022, Gibson Overseas, Inc. (“Gibson Homewares”) reported a data breach stemming from an incident in which an unauthorized party gained access to the company’s computer network. Based on an official filing from the company, the incident resulted in an unauthorized party gaining access to the names and Social Security numbers of certain individuals. After confirming that consumer data was leaked, Gibson began sending out

August 5, 2022 – On July 29, 2022, Allegheny Health Network (“AHN”) reported a data breach stemming from a successful email phishing attack. Based on an official filing from the company, the incident resulted in an unauthorized party gaining access to the patients’ names, dates of birth, dates of service, medical record/ID numbers, clinical information such as medical history, conditions, treatments and diagnoses, addresses, patient phone numbers,

August 5, 2022 – On August 1, 2022, Gage Brothers Concrete Products, Inc. reported a data breach after the company discovered that an unauthorized party had gained access to sensitive consumer information contained on its computer network. While Gage Brothers has not yet publicly disclosed the type of information that was leaked in the recent incident, state data breach reporting laws require companies to report any incident

On August 3, 2022, A. Duda & Sons, Inc., along with its affiliates and subsidiaries, including Duda Farm Fresh Foods, Duda Ranches, DUDA Commercial Properties, The Viera Company, Viera Builders, and Duran Golf Club (collectively, “DUDA”) reported a data breach after the company was targeted in a ransomware attack. Based on an official filing from the company, the incident resulted in an unauthorized party gaining access to

August 4, 2022 – On July 29, 2022, Healthback Holdings, LLC reported a data breach after an unauthorized party was able to access an employee email account containing sensitive patient information. Based on an official filing from the company, the incident resulted in an unauthorized party gaining access to the following data types: patient names, health insurance information, Social Security numbers, and clinical information. After confirming

August 4, 2022 – On August 1, 2022, Semikron reported a potential data breach stemming from what appears to be a ransomware attack. While the company’s investigation is still ongoing and the exact information that was leaked as a result of the incident has not yet been determined, the German Federal Office for Information Security reports that the ransomware attackers are threatening to leak up to 2

August 4, 2022 – On August 1, 2022, First Choice Community Healthcare, Inc. reported a data breach after the company confirmed that an unauthorized actor may have accessed or stolen sensitive information belonging to patients. Based on an official filing from the company, the incident resulted in an unauthorized party gaining access to the following data types: patients’ names, Social Security numbers, and protected health information.

August 4, 2022 – On July 28, 2022, Gaedeke Group, LLC reported a data breach after an unauthorized party was able to access certain employee email accounts containing sensitive data belonging to employees, suppliers and other individuals. Based on an official filing from the company, the incident resulted in an unauthorized party gaining access to the following data types: names, addresses, Social Security numbers, driver’s license

August 3, 2022 – On August 1, 2022, the Southwestern Family of Companies (“Southwestern”) reported a data breach after the company learned that an unauthorized actor had gained access to its computer network, including files containing sensitive consumer data. News of the Southwestern breach is still fresh, and the company has not yet publicly released the data types compromised as a result of the attack, information about

August 3, 2022 – On July 29, 2022, the accounting firm of Wisan Smith Racker & Prescott (“WSRP, LLC”) reported a data breach after the company learned that an unauthorized party was filing fraudulent tax returns on behalf of its clients. Based on an official filing from the company, the incident resulted in an unauthorized party gaining access to the following data types: names, Social Security numbers

August 3, 2022 – On July 29, 2022, Gardner Resources Consulting, LLC (“GRC”) reported a data breach stemming from an incident in which an unauthorized party gained access to GRC’s network. Based on an official filing from the company, the incident resulted in an unauthorized party gaining access to the following data types: names, Social Security numbers, driver’s license numbers, other government-issued identification numbers, and financial

August 3, 2022 – On July 29, 2022, RetireOne, Inc., a platform for fee-based insurance solutions developed and maintained by Aria Retirement Solutions, Inc., reported a data breach stemming from an incident involving an employee’s email address. Based on an official filing from the company, the incident resulted in an unauthorized party gaining access to the following data types: names, Social Security numbers, driver’s license numbers,

On July 26, 2022, Laborers International Union of North America Local 1098 (“LIUNA Local 1098,” “LIUNA 1098”) reported a data breach related to an incident in which an unauthorized party gained access to an employee email account. Based on an official filing from the company, the incident resulted in an unauthorized party gaining access to the following data types: names, Social Security numbers, driver’s license numbers, state

On July 29, 2022, Community Surgical Supply Inc. (“CSS”) reported a data breach stemming from what appears to be a ransomware attack resulting in an unauthorized party gaining access to sensitive consumer information in the possession of CSS. Based on an official filing from the company, the incident resulted in the following data types being compromised: full names, addresses, driver’s license numbers, government identification numbers, passport numbers,

August 2, 2022 – On July 7, 2002, The North Highland Company, LLC reported a data breach stemming from a ransomware attack resulting in the sensitive information of current and former employees being compromised. Based on an official filing from the company, the incident resulted in an unauthorized party gaining access to a wealth of employee data, including names, Social Security numbers, addresses, bank account numbers,