Consumer Privacy & Data Breaches

May 5 – Carvin Software, LLC reported a data breach to the Maine Attorney General on May 2, 2023, after discovering that a third party had stolen customer records from the company’s server. According to the company’s report, the breach led to the exposure of consumers’ names, financial account numbers, and Social Security numbers. Carvin Software began mailing data breach notification letters to all persons affected

May 5 – Berlin Packaging discovered on April 28, 2023 that sensitive human resources data housed on the firm’s computer network had been breached in a recent hack, prompting the company to submit a notification of data breach with the Massachusetts Office of Consumer Affairs and Business Regulation. According to the company’s report, the event led to the exposure of consumers’ personal information, including names, addresses, financial 

May 4 – After discovering they were the target of a cyberattack, Murfreesboro Medical Clinic & SurgiCenter (MMC) issued a warning on May 2, 2023. Patients were warned to monitor their data for suspicious activity in light of the company’s notification, but no leak was yet confirmed. MMC claims that this breach may have exposed consumers’ names, ages, phone numbers, driver’s license numbers, Social Security numbers,

May 4 – A message notifying students and staff of a system outage was issued on April 28, 2023 at Montana State University. MSU’s letter was limited in information, but the university has been added to the victim list of a well-known ransomware group. Data breach notification letters will be sent to all persons affected by the latest data security issue; however, MSU has not yet confirmed

May 3 – After discovering that sensitive customer data in its possession had been compromised by malware, HealthPlan Services, Inc. (HPS) notified the Attorney General of Maine on April 28, 2023. According to the company’s report, the breach exposed consumers’ names, dates of birth, Social Security numbers, identifying information, bank account information, and health and medical insurance information. After it was determined that customer information had

May 3 – On May 1, 2023, UnitedHealthCare Services, Inc. (UnitedHealthCare) announced that it had discovered suspicious behavior on its computer network that might have resulted in the leak of member information, prompting concerns of a data breach. UnitedHealthCare has not disclosed what kinds of data were compromised since the investigation into the issue is ongoing. The UnitedHealthCare hack may be substantial, though, due to the abundance

May 3 – Charter Foods, Inc. reported a data breach to the Maine Attorney General on April 7, 2023, after it was the victim of a malicious cyberattack that exposed sensitive consumer data. According to the company’s report, the event led to the disclosure of consumers’ names, Social Security numbers, birth dates, and addresses to a third party. Charter Foods began mailing data breach notification letters

May 1 – After discovering on April 28, 2023 that a security breach had compromised the privacy of some of the company’s consumer information, NextGen Healthcare, Inc. (NextGen) notified the Montana Attorney General of the breach. A third party gained access to the personal information of some of the firm’s consumers, including their names, Social Security numbers, mailing addresses, and birth dates, according to an official

April 29 – On April 26, 2023, Alvaria, Inc. filed a notice of data breach with the Massachusetts Attorney General, naming Carrington Mortgage Services (Carrington) in the report as the company that was breached. It was Carrington’s consumers whose information was involved in the breach. After it was determined that customer information had been compromised, Alvaria immediately began notifying all Carrington consumers who had been affected by

April 27 – IMA Financial Group, Inc. (IMA) reported a data breach to the Texas Attorney General on April 19, 2023, after an incident involving confidential consumer information was exposed to a third party. According to the company’s official report, the breach exposed the names, Social Security numbers, government ID numbers, driver’s license numbers, residences, dates of birth, insurance claims information, and health information of consumers.

April 27 – CIC Group, Inc. reported a data breach to the Texas Attorney General’s Office on April 24, 2023, after discovering that sensitive customer data had been compromised. According to the company’s official filing, a third party gained access to the personal information of some of its consumers as a consequence of the event. After it was determined that sensitive information had been compromised, CIC Group

April 26 – Confidential customer information entrusted to Livingston International, Inc. (Livingston) was compromised, and a notice of data breach was filed with the Texas Attorney General on April 24, 2023. According to the company’s official report, the event led to the exposure of consumers’ personal information, including names, addresses, driver’s license numbers, bank account information, and Social Security numbers. Soon after discovering the compromise of

April 26 – After discovering that sensitive customer data it had been holding was compromised due to a data security event, Sun Pharmaceutical Industries, Inc. (Sun Pharma) filed a notice of a data breach to the Attorney General of Massachusetts on April 19, 2023. According to the company’s official report, the incident led to the disclosure of consumers’ names and Social Security numbers to a third party.

April 26 – After discovering that a malware attack had provided unauthorized access to the personal information of certain consumers, Albertsons Companies, Inc. filed a notification of data breach with the Attorney General of Montana on April 21, 2023. While it has not yet been determined what kinds of information were compromised in the intrusion, Albertsons has started sending out breach notification letters to everybody who may

April 25 – Robeson Health Care Corporation notified the Maine Attorney General of a data breach on April 21, 2023, after discovering that sensitive patient information had been obtained by unknown users due to a malware attack. According to the company’s official report, the breach exposed consumers’ names, Social Security numbers, birth dates, residences, and protected health information. After it was determined that customer information had