Consumer Privacy & Data Breaches

January 9, 2023 – SAIF Corporation filed notice of a data breach with the Texas Attorney General on January 6, 2023 after learning of an incident involving unauthorized access of a third party. According to the filing, the information that was accessed included worker’s compensation claimants’ first and last names, driver’s license numbers, financial account information, Social Security numbers, medical history information, and insurance policy information.

January 8, 2023 – After discovering unusual activity on its computer network in December 2022, Wabtec Corporation posted a notice on its website. According to the notice, the malware attack resulted in the release of consumer information such as names, protected health information, financial information, criminal history, Social Security numbers and much more. Once it was confirmed that there was a data leak, Wabtec sent out notification

January 8, 2023 – The Robins & Morton Group filed notice of a data breach with the Attorney General of Montana on December 22, 2022 after discovering that consumer information had been accessed by an unauthorized party. According to the filing, information accessed included consumers’ first and last names and Social Security numbers. Once Robins & Morton confirmed the data breach, it sent notification letters to

January 8, 2023 – Howard Memorial Hospital announced a data breach on its website on December 29, 2022. According to the notice, the hospital received reports of a cyberattack on its computer network resulting in stolen patient and employee information. The current and former employee information that was accessed was full names, Social Security numbers, dates of birth, contact information, and direct deposit bank account information.

January 7, 2023 – Five Guys Enterprises, LLC filed notice of a data breach with several attorney generals throughout the country on December 29, 2022 after job applicants’ information was exposed to unauthorized parties in a cyberattack. According to the filing, the information that was accessed included first and last names, driver’s license numbers, financial account information, and Social Security numbers. Once Five Guys confirmed the

January 6, 2023 – Fitzgibbon Hospital filed notice of a data breach on December 30, 2022 with the U.S. Department of Health and Human Services Office for Civil Rights after determining that a security incident had leaked patient information of 112,072 individuals. According to the filing, patient information that was accessed included first and last names, Social Security numbers, financial account information, driver’s license numbers,

January 6, 2023 – Retreat Behavioral Health filed notice of a data breach on December 30, 2022 with the Vermont Attorney General after determining that patients’ information was leaked in a ransomware attack. Information that was accessed included protected health information. According to the filing, an unauthorized party gained access to patient information, including Social Security numbers and admission information. After confirming that there was a data

January 5, 2023 – Metropolitan Area EMS Authority, dba Medstar Mobile Healthcare, filed notice of a data breach on December 19, 2022 with the U.S. Department of Health and Human Services for Civil Rights after determining that the information of 612,000 patients was leaked after being hacked. Information that was accessed included protected health information. After confirming that there was a data leak, Medstar sent out notification

January 5, 2023 – Bay Bridge Administrators, LLC (“BBA”) filed notice of a data breach with the Massachusetts Attorney General on December 29, 2022, after sensitive information was exposed to unauthorized parties on its computer network. According to the filing, the information that was accessed included consumers’ first and last names and Social Security numbers. Once there was confirmation of the data breach, BBA sent notification

December 30, 2022 – After a ransomware attack exposed sensitive patient information in their possession, Monarch filed notice of a data breach with the Massachusetts Attorney General and the U.S. Department of Health and Human Services Office for Civil Rights on December 16, 2022. According to the filing, an unauthorized party gained access to patient information such as full names, Social Security numbers, and protected health

December 30, 2022 – After a ransomware attack that exposed sensitive consumer information in their possession, FoundCare, Inc. filed notice of a data breach with the U.S. Department of Health and Human Services Office for Civil Rights on December 16, 2022. According to the filing, an unauthorized party gained access to patient information through employee email accounts. The information that was accessed was patients’ full names, dates

December 30, 2022 – After a “security incident” involving sensitive student information being compromised, Cincinnati State Technical Community College filed notice of a data breach with the Montana Attorney General on December 23, 2022.

According to the filing, an unauthorized party gained access to student information like full names and Social Security numbers, dates of birth, addresses, driver’s license of state ID numbers, financial account information,

December 28, 2022 – After a ransomware attack that exposed sensitive consumer information in their possession, IBW Financial Corporation filed notice of a data breach with the Montana Attorney General’s office on December 23, 2022. According to the filing, an unauthorized party gained access to consumer information such as full names, dates of birth, driver’s license or state identification numbers, addresses, Social Security numbers, financial account

December 24, 2022 – Hartnell Community College District filed a notice of a data breach with the Attorney General of California on December 5, 2022 after learning that an unauthorized party could access confidential student information stored in its computer network.

According to the filing, an unauthorized party gained access to sensitive student information like first and last names, dates of birth, Social Security numbers, student

December 23, 2022 – BetMGM, LLC filed a notice of a data breach with the Massachusetts Office of Consumer Affairs and Business Regulations of the Massachusetts Attorney General on December 20, 2022 after learning that an unauthorized party could access confidential consumer information stored in its computer network.

According to the filing, an unauthorized party gained access to sensitive consumer information like consumer names and Social Security