Data breaches in September 2026
Data breaches first reported to a state attorney general, HHS or the SEC in September 2026: 55 breaches. Facts come from official filings with US state attorneys general, the U.S. Department of Health and Human Services (HHS) and the SEC; each breach page links its sources.
| Organization | First filed | People affected | Information exposed | Filed with |
|---|---|---|---|---|
| Trinity HealthTrinity Health breach history | 33,234 |
|
HHS | |
| Universal Dermatology & Vein CareUniversal Dermatology & Vein Care breach history | 35,295 |
|
HHS | |
| DriveWealthDriveWealth breach history | 30,000,000 |
|
California AG, Texas AG | |
| ProCampsPro Holdings, LLC breach history | 10,608 |
|
California AG, Texas AG | |
| Poppins Payroll CompanyPoppins Payroll Company breach history | 246,937 |
|
California AG, Texas AG | |
| PDCM InsurancePDCM Insurance breach history | 39,759 |
|
Texas AG | |
| CAZ Investments LPCAZ Investments LP breach history | 13,817 |
|
Texas AG | |
| Saber Healthcare IncSaber Healthcare Inc breach history | 427,084 |
|
Texas AG | |
| Upbound Group, Inc.Upbound Group, Inc. breach history | 76,327 |
|
California AG, Texas AG | |
| The Kenaitze Indian TribeThe Kenaitze Indian Tribe breach history | 9,319 |
|
HHS | |
| Ultramobile ImagingUltramobile Imaging breach history | 75,000 |
|
HHS | |
| MedImpact Healthcare Systems, Inc.MedImpact Healthcare Systems, Inc. breach history | 327,082 |
|
California AG, Texas AG | |
| Gallagher Transport International Inc.Gallagher Transport International Inc. breach history | 12,806 |
|
Texas AG | |
| OneMain Financial Group, LLCOneMain Financial Group, LLC breach history | 122,783 |
|
Texas AG, California AG | |
| HarbisonWalker International, Inc.HarbisonWalker International, Inc. breach history | 16,046 |
|
Texas AG | |
| Corpay, Inc.Corpay, Inc. breach history | 28,473 |
|
Texas AG | |
| Fairwinds Credit UnionFairwinds Credit Union breach history | 172,566 |
|
California AG, Texas AG | |
| Ridgeway Pharmacy LtdRidgeway Pharmacy Ltd breach history | 258,920 |
|
HHS, California AG, Texas AG | |
| United UnderwritersUnited Underwriters breach history | 77,894 |
|
California AG, Texas AG | |
| Call-on-DocCall-on-Doc breach history | 648,535 |
|
Texas AG | |
| IDScan.netIDScan.net breach history | 13,000,000 |
|
Texas AG | |
| Boston Capital Holdings LPBoston Capital Holdings LP breach history | 54,968 |
|
Texas AG | |
| Mitchell County Hospital DistrictMitchell County Hospital District breach history | 22,986 |
|
Texas AG | |
| Applied Healthcare Nursing Division, Inc. d/b/a Doctor's Choice Home CareApplied Healthcare Nursing Division, Inc. breach history | 14,333 |
|
HHS, Texas AG | |
| Young C. Park DDS., PC d/b/a Park DentalYoung C. Park DDS., PC breach history | 12,400 |
|
HHS | |
| Seyfarth Shaw LLPSeyfarth Shaw LLP breach history | 56,755 |
|
California AG, Texas AG | |
| Opportune LLPOpportune LLP breach history | 92,020 |
|
California AG, Texas AG | |
| Paylogix LLCPaylogix, LLC breach history | 41,739 |
|
HHS | |
| Three Oaks Hospice, IncorporatedThree Oaks Hospice, Inc. breach history | 2,399 |
|
HHS, Texas AG | |
| WindRose Health NetworkWindRose Health Network breach history | 33,158 |
|
HHS | |
| Leggett & Platt, Incorporated Employee Benefit PlanLeggett & Platt, Incorporated Employee Benefit Plan breach history | 61,702 |
|
HHS | |
| Texas Spine Consultants, PLLCTexas Spine Consultants, PLLC breach history | 99,068 |
|
Texas AG | |
| Paradigm Healthcare ServicesParadigm Healthcare Services breach history | 970,403 |
|
HHS, California AG | |
| Clover HealthClover Health breach history | 138,677 |
|
HHS | |
| Catalyst Physician GroupCatalyst Physician Group breach history | 248,144 |
|
California AG, Texas AG | |
| Suffolk Federal Credit UnionSuffolk Federal Credit Union breach history | 212,873 |
|
California AG, Texas AG | |
| Costa Solutions, LLCCosta Solutions, LLC breach history | 22,482 |
|
Texas AG | |
| Cornerstone Staffing Solutions, Inc.Cornerstone Staffing Solutions, Inc. breach history | 366,122 |
|
Washington AG, California AG, Texas AG | |
| Comprehensive Orthopedics & Musculoskeletal Care, LLCComprehensive Orthopedics & Musculoskeletal Care, LLC breach history | 21,897 |
|
HHS | |
| Vernon & Waldrep OB-Gyn AssociatesVernon & Waldrep OB-Gyn Associates breach history | 17,435 |
|
HHS, Texas AG | |
| Greenberg Traurig, LLP (“GT”)Greenberg Traurig, LLP breach history | 150,000 |
|
California AG, Texas AG | |
| Azle Cube Smiles PLLCAzle Cube Smiles PLLC breach history | 3,280 |
|
HHS, Texas AG | |
| HILT-Trust 2020-A and its underlying trusts and affiliatesHILT-Trust 2020-A and its underlying trusts and affiliates breach history | 41,153 |
|
Texas AG, California AG | |
| Quatrro Business Support Services, Inc.Quatrro Business Support Services, Inc. breach history | 188,218 |
|
Washington AG, California AG, Texas AG | |
| Lexington Hospital CorporationLexington Hospital Corporation breach history | 67,000 |
|
HHS | |
| Hibbett Retail, Inc.Hibbett Retail, Inc. breach history | 109,732 |
|
Washington AG, California AG, Texas AG | |
| Provident Behavioral HealthProvident Behavioral Health breach history | 25,086 |
|
HHS | |
| Brown, Jake & McDaniel, P.C.Brown, Jake & McDaniel, P.C. breach history | 43,605 |
|
Texas AG | |
| Catalyst Brands LLCCatalyst Brands LLC breach history | 187,341 |
|
Washington AG, California AG, Texas AG | |
| Bimbo Bakeries USABimbo Bakeries USA breach history | 46,064 |
|
Washington AG, Texas AG, California AG | |
| LHC Group, Inc.LHC Group breach history | 162,578 |
|
Washington AG, Texas AG, HHS | |
| District of Columbia, Department of Health Care FinanceDistrict of Columbia, Department of Health Care Finance breach history | 399,086 |
|
HHS | |
| Oculus PathologyOculus Pathology breach history | 19,764 |
|
HHS, Texas AG | |
| HumanEdge, Inc.HumanEdge, Inc breach history | 58,596 |
|
California AG, Texas AG | |
| Fiesta Insurance Franchise CorporationFiesta Insurance Franchise Corporation breach history | 48,092 |
|
California AG, Texas AG |
Other months in 2026
People affected is the official total from a filing, or “At least” the sum of state filings where no total was filed. Spotted an error? Report a correction.