Climate
Privacy
Bob Dylan
Drones
Data Centers
AI Governance
2026 Maine Senate Race
Last Update: 08/01/2026 at 12:00 PM EST
Ransomware Breaches Expose Sensitive Data
Coverage from Morningstar, Federman & Sherwood, and others
Articles
93
Active Days
103
The Topic
Organizations across insurance, healthcare, employment services, local government, and online platforms are reporting breaches involving personal, financial, medical, and account data. Ransomware and unauthorized access are recurring mechanisms, with several incidents affecting large populations and prompting notifications, monitoring guidance, and legal investigations. The material also includes a distinct dispute involving Suno over exposed user records and alleged music-data scraping.
First Article: 04/16/26
Latest Article: 07/27/26
Summary
- Reported incidents involve Social Security numbers, government IDs, financial data, medical records, insurance information, and account credentials.
- Ransomware is identified in the Beacon Mutual and Kootenai County incidents, while other cases involve unauthorized access to corporate networks or platforms.
- Beacon Mutual reported about 162,000 potentially affected people, while Medtronic reported approximately 8,668 affected Vermont residents.
- Public agencies, insurers, healthcare organizations, employers, and technology platforms are all represented among the affected organizations.
- Organizations and legal advisers are directing potentially affected individuals to monitor accounts, credit reports, healthcare records, and insurance statements.
- Several reports focus on possible legal claims and questions about whether reasonable safeguards were in place.
- The Suno incident is a partial outlier, combining user-account exposure with allegations about scraping music and lyrics for AI training.
History
The story now adds a distinct Suno angle, shifting part of the coverage from conventional ransomware/privacy breaches to a platform dispute involving exposed user records and alleged music-data scraping. It also introduces new scale details, including Beacon Mutual’s roughly 162,000 potentially affected people and Medtronic’s Vermont notice.
The story has shifted from a mixed set of breach disclosures to a more specific pattern of ransomware-driven incidents, with clearer attribution to named extortion groups and a stronger emphasis on delayed notice and litigation risk. The breadth of affected sectors and states also widened, especially with public-sector and property-related victims now prominent.
Featured
05-23-2026
Wolf Haldenstein Adler Freeman & Herz LLP investigates claims for people notified about a June 2025 Cardinal data breach in Coos Bay, Oregon.
07-06-2026
Federman & Sherwood investigated a Medtronic data breach reported to the Vermont Attorney General, affecting about 8,668 Vermont residents with exposed Social Security numbers and health records.
07-21-2026
Have I Been Pwned said a Suno breach exposed over 55 million accounts, including email addresses and Stripe-linked payment details, after dataset ingestion of breach files.
Timeline: 103 Days
Hover over any logo to see coverage summary, click for full article.
Additional Articles
⭐⭐⭐⭐⭐
Kootenai County announced July 22 that ransomware detected March 30 led to theft of residents data, including Social Security numbers and medical records.
Beacon Mutual Insurance Co. began mailing breach notifications after a January 2026 ransomware attack exposed personal and health-related data for workers' compensation claimants in Rhode Island and beyond.
Mullinax Ford disclosed an April 15, 2026 breach after a DragonForce ransomware attack exposed consumer Social Security and driver license data in late 2025.
JRK Property Holdings notified Massachusetts, Nebraska, and New Hampshire after a March 26, 2026 ransomware-linked incident and an April 4 Tor claim exposed Social Security and financial account data.
Fulcrum Real Estate Services Inc. reported a March 9, 2026 ransomware attack on Egnyte potentially exposing Massachusetts residents' Social Security numbers and offered identity protection through IDX.
Paylogix disclosed a Nov. 2025 data breach in New York after the Akira ransomware group claimed on Jan. 15, 2026 that 185 GB of data was stolen.
A class-action lawsuit filed in Rhode Island accuses Beacon Mutual Insurance Company of failing to secure and timely notify after a January ransomware breach exposed personal and health identifiers.
American Tower and ShinyHunters reported a June 2026 data breach that exposed employee, contractor, and customer records, later listed on Have I Been Pwned.
Lansing Community College disclosed a February 2025 breach exposing sensitive identifiers for 170,000+ people as experts warned about phishing and identity theft.
Kootenai County, Idaho notified residents beginning July 2 after a March 30 ransomware detection potentially exposed Social Security numbers, health data, and some fingerprint identifiers.
Paidwork breach reporting claims hackers sold platform data in March 2026, later released publicly in July and added to Have I Been Pwned on July 19.
ShinyHunters targeted American Tower in June 2026, publishing a dataset later added to Have I Been Pwned on June 26 and exposing accounts plus telecom infrastructure data.
Conquest Adventures, LLC disclosed a ransomware attack around June 12, 2026 that may have exposed personal information for 868 people, including 11 Idaho residents.
Family Farm & Home notified Massachusetts residents of unauthorized access discovered during a cybersecurity incident and offered Experian IdentityWorks monitoring after a WorldLeaks ransomware claim.
Beacon Mutual Insurance notified Rhode Island residents in 2026 after unauthorized January access exposed Social Security, financial, health, and driver license data.
City of St. Paul notified 12,484 people in 2025 after a July intrusion exposed Social Security numbers and other sensitive data from Parks and Recreation systems.
Federman & Sherwood is investigating Ampex Data Systems after an unauthorized-access incident disclosed to California Attorney General in May 2026.
RCI Internet Services discovered a March 23, 2026 disruption after March 19 unauthorized file access, notified Maine authorities and the FBI, and offered IDX identity protection for exposed personal data.
Federman & Sherwood investigates the Mercadien, P.C. CPAs data breach in Maine after unauthorized third-party access potentially exposed Social Security numbers, addresses, and government IDs.
SR Bancorp reported a July 10, 2026 vendor incident at Mercadien involving unauthorized access to Somerset Regal Bank customer files containing SSNs and account data.
ClassAction.org attorneys are investigating a potential class action over Industrial Acceptance Corporation's ransomware breach, involving potential compromise of Social Security numbers, after Maine and California filings.
Hackers claimed Paidwork data theft in March 2026, and a July posting reportedly exposed 23 million email addresses, banking details, payout histories, and bcrypt password hashes.
Suno disclosed a November 2025 breach made public in July 2026, exposing 55 million sign-up emails and phone numbers plus partial Stripe purchase details.
Middletown, Ohio notified 123,791 residents in July 2025 after a breach exposed SSNs, financial and medical records, with water billing restored in January 2026.
⭐⭐⭐
Edelson Lechtzin LLP investigated data privacy claims after SunSource Borrower LLC learned of a breach around April 30, 2026, exposing sensitive personal data.
Federman & Sherwood is investigating an Alcott breach reported in California after unauthorized access potentially exposed names, Social Security numbers, and dates of birth.
Charles River Insurance Brokerage Inc. reported a ransomware data breach to Massachusetts regulators on Dec. 19, 2025, affecting 232 residents, with Akira Tor claims in April 2026.
Carlson Building Maintenance Inc. reported an Akira-linked ransomware data breach on April 3, 2026, affecting 1,118 Iowa residents with exposed Social Security numbers.
Akira ransomware claimed responsibility in April 2026 for a breach at Alliance Roofing Co. Inc. in Santa Clara, California, triggering California Attorney General reporting and 2026 notifications.
Beacon Mutual Insurance Company disclosed a January 2026 ransomware-linked breach affecting Texas, Maine, and Vermont residents, with notifications starting May 18, 2026.
Ampex Data Systems disclosed a 2026 PLAY ransomware breach affecting 3,723 people, with notifications sent in May 2026 after encrypted access on March 21.
Cardinal Services Inc. disclosed a ransomware data breach affecting about 142,323 people in the U.S., including Maine and Vermont residents, with notifications starting May 20, 2026.
Noll & Tam Architects disclosed a May 2026 ransomware-related breach after TERMITE Tor posting, with Massachusetts reporting on May 19, 2026.
Industrial Acceptance Corp. notified U.S. consumers in May 2026 after a 2025 ransomware breach exposed Social Security and driver's license numbers for about 79,216 people.
IMA Diligence Services LLC disclosed a December 2025 breach tied to a third-party file server, affecting about 525,306 people, with notifications beginning May 29, 2026.
Project Consulting Services Inc. disclosed a Play ransomware-linked data breach with suspected unauthorized access on Feb 25-26, 2026, exposing US Social Security numbers and triggering June 2026 notifications.
Superior Drywall Inc. disclosed on June 12, 2026 that a Jan 9-12, 2026 ransomware attack affected 730 Massachusetts residents with exposure of Social Security numbers.
SunSource Borrower LLC began notifying 2,142 Texas and 193 Massachusetts residents after a 2026 ransomware-related breach exposed PII and protected health information.
Alcott HR reported a ransomware-linked data breach to the California Attorney General on June 17, 2026 after detecting unauthorized access on Feb 12, 2025.
Wills Point Chevrolet disclosed a March 2026 ransomware-linked breach affecting at least 483 Texas residents after Akira claimed data access on the dark web.
Wright-Ryan Construction Inc. reported a potentially identity-compromising data breach to Massachusetts regulators and offered IDX credit monitoring after June 18, 2026.
Risk Strategies reported a June 23, 2026 data breach to Massachusetts regulators, exposing SSNs and some medical records for 47 residents.
Chaos ransomware group claimed data theft from Challenge Manufacturing on May 17, 2026, affecting 1,661 Texas residents with exposed medical and Social Security information.
Tower Administrative Services reported a corporate network data breach in 2026 affecting Texas and Vermont residents, with notifications beginning June 23, 2026.
Northern Technologies International Corp. disclosed a Feb. 2026 ransomware breach in Minnesota after Chaos claimed data theft and exposed Social Security and driver's license information.
Hastings, Nebraska provider Wabi Sabi Behavioral Health Center disclosed an employee payroll-record breach in 2026 and offered Kroll identity monitoring after notification to the Nebraska Attorney General.
Texas Hearing Institute notified Massachusetts regulators in late June 2026 after a ransomware-linked breach exposed Social Security numbers and medical records.
Park Dental Research disclosed a Massachusetts ransomware breach on or about April 29, 2026, with Interlock claiming data theft and IDX protection offered.
NTN Bearing disclosed an April 15, 2026 data breach after Payouts King posted a May 13, 2026 Tor claim involving employee PII and internal records; disclosure to the Indiana Attorney General occurred June 22, 2026.
Markel Insurance reported a July 7, 2026 data breach to the Texas Attorney General affecting at least 268 Texas residents.
Mario Susi & Son Inc. notified 175 Massachusetts residents after a June 2026 ransomware attack potentially exposed Social Security and payroll records.
Family Partnerships of Central Florida disclosed a ransomware-linked breach from December 2025 to January 2026, with Money Message claiming data access in January 2026 and exposure affecting Massachusetts and Vermont residents.
Michigan Surgical Center LLC notified Massachusetts regulators on July 17, 2026 after a ransomware group claimed data theft on June 3, potentially exposing Social Security numbers.
Alkegen disclosed a ransomware-related breach on April 2026 after Akira claimed theft of data including Social Security numbers and health records.
Edelson Lechtzin LLP investigates American Lending Center ransomware incident from July 2025 after unauthorized access exposed personal identifying information for 123,158 individuals.
Kootenai County announced July 22 that ransomware attackers accessed and stole sensitive identity, health, payment, and some fingerprint data from a county network.
The City of St. Paul notified 12,484 people in July 2025 after a ransomware-linked cyberattack exposed Social Security numbers and other identifiers tied to Parks and Recreation data.
SOCRadar reported LBB Treuhand as a SafePay ransomware leak-site victim listing on July 20, 2026, with Germany emphasized as the main target region.
Cardinal Services in Coos Bay, Oregon disclosed a June 2025 breach potentially exposing Social Security numbers and financial account data, with dark-web sale concerns and legal investigation.
Beacon Mutual Insurance Company disclosed a January 2026 data breach affecting names linked to Social Security, financial, and health information across Rhode Island, Massachusetts, and Connecticut.
Lansing Community College disclosed a February 2025 data breach after discovery on February 18, 2025, affecting 174,307 people with sensitive personal information exposure.
Edelson Lechtzin LLP investigated potential class action claims after SunSource Borrower LLC reported a ransomware data breach on or about April 30, 2026.
SunSource Borrower LLC disclosed a 2026 ransomware-driven data breach, and Edelson Lechtzin LLP is investigating potential class action claims for impacted individuals.
Northwest Iowa Community College disclosed a possible data breach in Sheldon, Iowa, after detecting unauthorized activity around November 26, 2025.
Northwest Iowa Community College disclosed unauthorized access to computer systems between November 24 and 26, 2025, with notice and credit monitoring planned for potentially affected individuals.
Hastings, Nebraska provider Wabi Sabi Behavioral Health Center notified employees after a June 15 account-takeover incident potentially exposed payroll records including Social Security numbers.
Kirbor Homes disclosed a ransomware-related data breach impacting systems in Hampton Roads after PLAY claimed stolen data on February 19, 2026.
Block Engineering entities notified individuals in Massachusetts of a data breach in which the additional affected data element was not publicly specified and Kroll monitoring was offered for 24 months.
American Lending Center notified consumers on Apr. 28, 2026 after discovering a ransomware breach on July 27, 2025, with 123,000+ potentially affected.
Kootenai County, Idaho reported March 30 ransomware theft of personal, medical, and payment data, with review completed July 2.
Federman & Sherwood investigates an American Lending Center ransomware breach reported to the Maine Attorney General after July 2025 unauthorized access exposed sensitive consumer information.
Alliance Roofing Company reported a 2025 unauthorized-access incident with potential exposure of Social Security and driver license numbers, triggering credit monitoring and legal investigation.
Federman & Sherwood is investigating the Challenge Mfg. Company data breach reported to the Vermont Attorney General involving possible Social Security number exposure.
Federman & Sherwood investigates a Community Based Care Brevard breach reported to Vermont's Attorney General on July 23, 2026, after unauthorized access to sensitive personal data.
Federman & Sherwood is investigating the Family Farm & Home data breach reported to the Vermont Attorney General involving potential exposure of Social Security numbers.
Federman & Sherwood investigated The Lawson Roofing Co., Inc. after unusual network activity in April 2026 led to possible unauthorized access of sensitive personal information.
Challenge Manufacturing reported a Chaos-attributed ransomware data breach affecting Texas residents after a May 17, 2026 dark web posting and June 26, 2026 Texas AG notification.
TPIS Industrial Services reported a July 17, 2026 ransomware-driven data breach to the Texas Attorney General after dark web leak threats by PLAY.
Edelson Lechtzin LLP investigates privacy claims after American Lending Center ransomware incident exposed Social Security numbers and dates of birth in July 2025.
Murphy Law Firm is evaluating legal options for a RCI Internet Services, Inc. breach discovered March 23, 2026, involving unauthorized access on March 19.
Murphy Law Firm is assessing potential class-action claims after Alcott HR Group discovered and investigated a February 2025 breach.
Wolf Haldenstein Adler Freeman & Herz LLP began investigating a Lifespark Management Services data breach reported in February 2026 in St. Louis Park, Minnesota.
Cardinal notified individuals in Coos Bay, Oregon, after a June 2025 data breach that may have exposed Social Security numbers and financial account information.
Edelson Lechtzin LLP said a ransomware attack at IAC identified around February 24, 2025 may have exposed sensitive data for up to 79,216 individuals in the United States.
AssuranceAmerica Managing General Agency investigated a March 2026 IT intrusion in Atlanta, Georgia, with Edelson Lechtzin LLP evaluating class action claims after sensitive data exposure.
Beacon Mutual Insurance Company disclosed a 2026 ransomware attack affecting 11,890 Rhode Island, Connecticut, and Massachusetts residents, with Social Security and license data exposed.
On July 7, 2026, a Texas Attorney General filing identified Markel Insurance for a potential data breach affecting 4,220 people, involving SSNs and health records.
Paylogix reported unauthorized access between Nov. 13 and Nov. 18, 2025, and Akira claimed responsibility on Jan. 15, 2026, potentially exposing sensitive personal data.
Fulcrum Real Estate Services disclosed an Egnyte file-access incident discovered March 9, 2026, and offered IDX identity protection after finding personal information possibly exposed.
American Lending Center disclosed a July 2025 ransomware incident affecting about 123,158 people, including 120 Maine residents, with sensitive personal data exposure.