Were you recently affected by a data breach?

Current Data Breaches

Featured Data Breaches

Date of Breach: Unauthorized access August 10, 2026 to August 12, 2026

Protected health information (name and other health data; specific categories not disclosed). Social Security numbers were not involved.

Date of Breach: Server misconfiguration in or around September 2019; discovered May 29, 2026; notice dated October 14, 2026

Name with Social Security number, driver’s license number, financial account information, date of birth, medical information, or health insurance information (varies by individual)

Date of Breach: Reported to the Vermont Attorney General on October 22, 2026 (incident dates not yet publicly disclosed)

Financial account codes, credit and debit account information

Date of Breach: Discovered October 21, 2026; disclosed October 22, 2026

Certain patient records (specific categories of information not yet disclosed by the company).

Date of Breach: Reported to the Vermont Attorney General on October 22, 2026 (incident date not disclosed)

Financial account codes and credit or debit account information (categories listed in the Vermont Attorney General’s register).

Date of Breach: October 21, 2026 (claimed by a ransomware group, unconfirmed)

Not yet determined. A ransomware group has listed the company on its leak site, but the company has not confirmed a breach or what data is involved.

Date of Breach: Reported to the Vermont Attorney General on October 21, 2026 (incident date not disclosed)

Social Security numbers, financial account codes, and credit or debit account information (categories listed in the Vermont Attorney General’s register).

Date of Breach: October 21, 2026 (claimed by a ransomware group, unconfirmed)

Not yet determined. A ransomware group has listed the agency on its leak site, but the agency has not confirmed a breach or what data is involved.

OFX
Date of Breach: September 28, 2026

According to OFX: names and usernames, contact information (address, email and phone number), dates of birth, occupation, answers to secret questions, information about select transfers and recipients, communications with OFX, IP addresses and device information, and social media URLs. OFX says copies of identity documents were not accessed.