Recent Data Breaches (2026)

Companies recently disclosed these data breaches to state regulators. Got a breach notification letter, or worried you were affected? Each page explains what's known, how to tell if you're affected, the steps to protect yourself, and how to check whether the breach leads to a class action settlement you can claim.

A breach notice is not a settlement. It means a company disclosed a security incident. A settlement — money you can claim — only comes later, and only sometimes. Class Action Buddy tracks settlements and alerts you if one opens for a company whose breach affected you. See also our directory of data-breach settlements.

What a breach notification letter actually means

It means a company told a regulator, and you, that your data was exposed. It is not an offer, and it is not proof anyone will ever pay you. Keep the letter anyway. If a settlement follows, that letter is often what identifies you to the administrator, and some claim forms want a Claimant ID that only reaches people the company could identify from its own records.

Breach settlements open right now

These are data-breach settlements we have checked against the court-appointed administrator. Each links to the current deadline and what it pays:

  • Comcast — a $117.5 million fund covering the October 2023 breach, with documented losses or a flat alternative cash payment.
  • Stiiizy — up to $7,500 for documented losses, or a no-documentation pro-rata share.
  • Total Vision — California residents who were mailed notice, with up to $1,000 of documented expenses.

Why most breaches never pay anyone

Most disclosed breaches produce no settlement at all, and the ones that do take years. Even after a settlement is agreed, money moves only once four gates have opened: the claims deadline passes, a judge holds a final approval hearing, the approval order is entered, and a roughly 30–35 day appeal window closes. We set the sequence out, with real dates, in which settlements are paying out now.

Reported Nov 9, 2026
Baker Tilly Advisory Group data breach
Official record →
Reported Nov 9, 2026
Kalahari Management Co data breach
Official record →
Reported Nov 9, 2026
Cornick, Garber & Sandler data breach
Official record →
Reported Nov 9, 2026
Dorsata data breach
Official record →
Reported Nov 9, 2026
Telecare Health data breach
Official record →
Reported Nov 6, 2026
Hollister Family Dental & Implant Center data breach
Official record →
Reported Nov 6, 2026
Premise Health Holding data breach
Official record →
Reported Nov 6, 2026
Enara Health data breach
Official record →
Reported Nov 5, 2026
Amplifon data breach
Official record →
Reported Nov 5, 2026
UFP Technologies data breach
Official record →
Reported Nov 4, 2026
Yu Ming Charter School data breach
Official record →
Reported Nov 4, 2026
Hoag Memorial Hospital Presbyterian data breach
Official record →
Reported Nov 4, 2026
RevSpring data breach
Official record →
Reported Nov 3, 2026
Upland Unified School District data breach
Official record →
Reported Nov 3, 2026
Center Theatre Group of Los Angeles data breach
Official record →
Reported Nov 3, 2026
Peninsula Corridor Joint Powers Board data breach
Official record →
Reported Nov 3, 2026
Hippo Analytics data breach
Official record →
Reported Nov 2, 2026
DreamHost data breach
Official record →
Reported Nov 2, 2026
University of Mississippi Medical Center data breach
Official record →
Reported Oct 30, 2026
EyeMed Vision Care data breach
Official record →
Reported Oct 30, 2026
Baanx US data breach
Official record →
Reported Oct 30, 2026
El Camino Health data breach
Official record →
Reported Oct 30, 2026
The Nueva School data breach
Official record →
Reported Oct 30, 2026
Aesto data breach
Official record →
Reported Oct 30, 2026
NCH data breach
Official record →
Reported Oct 30, 2026
Central Ohio Primary Care Physicians data breach
Official record →
Reported Oct 29, 2026
Marathon Health data breach
Official record →
Reported Oct 29, 2026
Revolve Group data breach
Official record →
Reported Oct 29, 2026
Blossom BH Opco data breach
Official record →
Reported Oct 29, 2026
HCA Healthcare data breach
Official record →
Reported Oct 29, 2026
Bangkok Bank PCL - New York Branch data breach
Official record →
Reported Oct 29, 2026
Del Monte Foods Corporation II data breach
Official record →
Reported Oct 28, 2026
Photon Health data breach
Official record →
Reported Oct 28, 2026
Troutman Pepper Locke data breach
Official record →
Reported Oct 27, 2026
Quantum Health data breach
Official record →
Reported Oct 27, 2026
Hitec Group USA data breach
Official record →
Reported Oct 27, 2026
Tradier Brokerage data breach
Official record →
Reported Oct 27, 2026
Indico Data Solutions data breach
Official record →
Reported Oct 27, 2026
Directed Trust data breach
Official record →
Reported Oct 27, 2026
Baker & McKenzie data breach
Official record →
Reported Oct 27, 2026
Sarku Japan data breach
Official record →
Reported Oct 26, 2026
USForex data breach
Official record →
Reported Oct 23, 2026
Apollo Management Holdings data breach
Official record →
Reported Oct 23, 2026
Navigate 360 data breach
Official record →

Data-breach information is compiled from the California Attorney General's public breach-notification list. Class Action Buddy is not a law firm and is not affiliated with any regulator or the listed companies. Confirm details on each official record.