Date of Breach: September 18, 2026 to October 15, 2026
Names, email addresses, employer or school names, physical addresses, biographical information entered by users, and plaintext CottonWorks.com passwords
Were you recently affected by a data breach?
Names, email addresses, employer or school names, physical addresses, biographical information entered by users, and plaintext CottonWorks.com passwords
FTP/SFTP usernames and passwords, webmail login credentials, in some cases email contents and stored files
Names, addresses, Social Security numbers, driver’s license numbers, medical information, dates of birth
Names, Social Security numbers
Names, Social Security numbers, driver’s license numbers, government ID numbers, financial information, medical information, health insurance information
Not yet publicly disclosed
Not yet publicly disclosed. The provider has not confirmed an incident or identified any data types. The group claiming the attack says it holds 430 gigabytes of data.
Names with contact information, demographic information, Social Security numbers, driver’s license numbers, dates of birth, medical record numbers, patient account numbers, diagnosis, treatment and prescription information, provider names, dates of service, and health insurance information. For some patients, financial account and routing numbers.
Social Security numbers, per the company’s filing with the Vermont Attorney General’s Office