Eyemart says an incident involved unauthorized access to its systems on February 12, 2026. Files included employee information and payroll data; the company says it contained the incident and is offering identity-protection services.
ZenPatient says an unauthorized actor accessed or copied company data between December 5, 2025, and February 12, 2026. The company reports no known misuse and is offering affected individuals 12 months of identity protection.
BAYADA says an unauthorized actor accessed certain systems and copied data from February 18 to March 2, 2026. The company reports no indication of related identity theft or fraud and is offering credit monitoring.
A sample breach notice says Cushman & Wakefield discovered unauthorized access on April 29, 2026, and that a third party exfiltrated files containing personal data. The company says it reset credentials and increased monitoring.
CTS Journey Holdings says an unauthorized actor accessed its network from Dec. 3–11, 2025. A forensic review found personal information on affected systems; the notice says 15 Rhode Island residents were impacted.
Moody Bible Institute says information including individuals’ names was acquired from its systems on or about June 12, 2026, after a software vulnerability was exploited. The institute says it patched the flaw and is offering credit monitoring.
Universal Plant Services says an unauthorized person accessed data on its network from June 8–12, 2026. The potentially involved information includes names with Social Security, driver’s license, or financial account details.
Terry J. Dubrow’s medical practice says an unauthorized actor accessed its network starting January 16, 2025, and acquired patient data. The practice says it contained the incident and has no evidence of misuse or public disclosure.
May Trucking says it detected suspicious network activity on June 21, 2026, and found files acquired without authorization. Some affected files contained individuals’ names and Social Security numbers.
Turner Construction disclosed unauthorized system access between July 2 and 15, 2026, involving files containing personal and financial information. It notified about 6,098 California residents and is offering five years of identity protection.
Kern Psychiatric Health and Wellness Center says files containing patient data were accessed without authorization on Genesis Healthcare Management’s network. Potentially affected information includes medical and identifying details; no misuse is known.
LACMA says an unauthorized party accessed part of its network from July 7–11, 2025, affecting files containing some individuals’ personal information. It is offering a year of identity-theft protection.
Pan American Group says an unknown actor accessed servers on April 8–9, 2026, and accessed or acquired files that may have contained individuals’ information. The company is offering 12 months of credit monitoring.
Catalyst Brands says an unauthorized party accessed third-party servers supporting its HR and payroll services around May 26, 2026, and obtained personal information, including Social Security numbers and government IDs.
Fun For Less Tours says an unknown party accessed its network and acquired files in a ransomware attack discovered October 27, 2025. The company later found some recipients’ personal information in the files.
NSE Insurance Agencies says files containing personal information may have been accessed and acquired during unauthorized network access from Nov. 6–29, 2025. The company says it is unaware of resulting identity fraud or misuse.
