Recent Data Breaches (2026)

Companies recently disclosed these data breaches to state regulators. Got a breach notification letter, or worried you were affected? Each page explains what's known, how to tell if you're affected, the steps to protect yourself, and how to check whether the breach leads to a class action settlement you can claim.

A breach notice is not a settlement. It means a company disclosed a security incident. A settlement — money you can claim — only comes later, and only sometimes. Class Action Buddy tracks settlements and alerts you if one opens for a company whose breach affected you. See also our directory of data-breach settlements.

What a breach notification letter actually means

It means a company told a regulator, and you, that your data was exposed. It is not an offer, and it is not proof anyone will ever pay you. Keep the letter anyway. If a settlement follows, that letter is often what identifies you to the administrator, and some claim forms want a Claimant ID that only reaches people the company could identify from its own records.

Breach settlements open right now

These are data-breach settlements we have checked against the court-appointed administrator. Each links to the current deadline and what it pays:

  • Comcast — a $117.5 million fund covering the October 2023 breach, with documented losses or a flat alternative cash payment.
  • Stiiizy — up to $7,500 for documented losses, or a no-documentation pro-rata share.
  • Total Vision — California residents who were mailed notice, with up to $1,000 of documented expenses.

Why most breaches never pay anyone

Most disclosed breaches produce no settlement at all, and the ones that do take years. Even after a settlement is agreed, money moves only once four gates have opened: the claims deadline passes, a judge holds a final approval hearing, the approval order is entered, and a roughly 30–35 day appeal window closes. We set the sequence out, with real dates, in which settlements are paying out now.

Reported Oct 19, 2026
STS Aviation Group data breach
Official record →
Reported Oct 18, 2026
Stitch Connect data breach
Official record →
Reported Oct 16, 2026
Frazer data breach
Official record →
Reported Oct 16, 2026
Inner City Education Foundation data breach
Official record →
Reported Oct 16, 2026
John G. Yphantides data breach
Official record →
Reported Oct 15, 2026
The Money Store data breach
Official record →
Reported Oct 15, 2026
City of Foster City data breach
Reported Oct 14, 2026
BDG Law Group data breach
Official record →
Reported Oct 14, 2026
Kern County Superintendent of Schools data breach
Official record →
Reported Oct 13, 2026
Porter and data breach
Official record →
Reported Oct 13, 2026
Magna Hospitality Group data breach
Official record →
Reported Oct 13, 2026
Tulare Joint Union High School District data breach
Official record →
Reported Oct 13, 2026
American Board of Preventive Medicine data breach
Official record →
Reported Oct 13, 2026
JM Bullion data breach
Official record →
Reported Oct 12, 2026
Mercadien, P.C. CPAs data breach
Official record →
Reported Oct 7, 2026
Alisal Union Schol District data breach
Official record →
Reported Oct 5, 2026
Advantest America data breach
Official record →
Reported Oct 1, 2026
Aldrich Services data breach
Official record →
Reported Oct 1, 2026
Lincoln Property Company Commercial data breach
Official record →
Reported Oct 1, 2026
Marana Health Center data breach
Official record →
Reported Oct 1, 2026
Greenberg Traurig data breach
Official record →
Reported Sep 30, 2026
American Family Connect Insurance data breach
Official record →
Reported Sep 30, 2026
Nishiyamato Academy data breach
Official record →
Reported Sep 29, 2026
Poppins Payroll data breach
Official record →
Reported Sep 29, 2026
Challenge Financial Services data breach
Official record →
Reported Sep 29, 2026
City of McMinnville data breach
Official record →
Reported Sep 27, 2026
Upbound Group data breach
Official record →
Reported Sep 25, 2026
Financial Administrative Support Services data breach
Official record →
Reported Sep 25, 2026
OneMain Financial Group data breach
Official record →
Reported Sep 25, 2026
MedImpact Healthcare Systems data breach
Official record →
Reported Sep 25, 2026
Gallagher Transport International data breach
Official record →
Reported Sep 24, 2026
Blanchard Training & Development data breach
Official record →
Reported Sep 24, 2026
5Star Life Insurance data breach
Official record →
Reported Sep 24, 2026
HILT-Trust 2020-A and its underlying trusts and affiliates data breach
Official record →
Reported Sep 24, 2026
NSE Insurance Agencies data breach
Official record →

Data-breach information is compiled from the California Attorney General's public breach-notification list. Class Action Buddy is not a law firm and is not affiliated with any regulator or the listed companies. Confirm details on each official record.