Recent Data Breaches (2026)

Companies recently disclosed these data breaches to state regulators. Got a breach notification letter, or worried you were affected? Each page explains what's known, how to tell if you're affected, the steps to protect yourself, and how to check whether the breach leads to a class action settlement you can claim.

A breach notice is not a settlement. It means a company disclosed a security incident. A settlement — money you can claim — only comes later, and only sometimes. Class Action Buddy tracks settlements and alerts you if one opens for a company whose breach affected you. See also our directory of data-breach settlements.

What a breach notification letter actually means

It means a company told a regulator, and you, that your data was exposed. It is not an offer, and it is not proof anyone will ever pay you. Keep the letter anyway. If a settlement follows, that letter is often what identifies you to the administrator, and some claim forms want a Claimant ID that only reaches people the company could identify from its own records.

Breach settlements open right now

These are data-breach settlements we have checked against the court-appointed administrator. Each links to the current deadline and what it pays:

  • Comcast — a $117.5 million fund covering the October 2023 breach, with documented losses or a flat alternative cash payment.
  • Stiiizy — up to $7,500 for documented losses, or a no-documentation pro-rata share.
  • Total Vision — California residents who were mailed notice, with up to $1,000 of documented expenses.

Why most breaches never pay anyone

Most disclosed breaches produce no settlement at all, and the ones that do take years. Even after a settlement is agreed, money moves only once four gates have opened: the claims deadline passes, a judge holds a final approval hearing, the approval order is entered, and a roughly 30–35 day appeal window closes. We set the sequence out, with real dates, in which settlements are paying out now.

Reported Sep 29, 2026
Poppins Payroll data breach
Official record →
Reported Sep 29, 2026
Challenge Financial Services data breach
Official record →
Reported Sep 29, 2026
City of McMinnville data breach
Official record →
Reported Sep 27, 2026
Upbound Group data breach
Official record →
Reported Sep 25, 2026
Financial Administrative Support Services data breach
Official record →
Reported Sep 25, 2026
OneMain Financial Group data breach
Official record →
Reported Sep 25, 2026
MedImpact Healthcare Systems data breach
Official record →
Reported Sep 25, 2026
Gallagher Transport International data breach
Official record →
Reported Sep 24, 2026
Blanchard Training & Development data breach
Official record →
Reported Sep 24, 2026
5Star Life Insurance data breach
Official record →
Reported Sep 24, 2026
HILT-Trust 2020-A and its underlying trusts and affiliates data breach
Official record →
Reported Sep 24, 2026
NSE Insurance Agencies data breach
Official record →
Reported Sep 23, 2026
Fairwinds Credit Union data breach
Official record →
Reported Sep 22, 2026
Modoc Medical Center data breach
Official record →
Reported Sep 21, 2026
Friesen Group data breach
Official record →
Reported Sep 21, 2026
Ethan Conrad Properties data breach
Official record →
Reported Sep 21, 2026
Fun For Less Tours data breach
Official record →
Reported Sep 21, 2026
Ridgeway Pharmacy data breach
Official record →
Reported Sep 18, 2026
Seyfarth Shaw data breach
Official record →
Reported Sep 18, 2026
The Office of the Los Angeles City data breach
Official record →
Reported Sep 18, 2026
Opportune data breach
Official record →
Reported Sep 17, 2026
CallonDoc data breach
Official record →
Reported Sep 15, 2026
Tarter Krinsky & Drogin data breach
Official record →
Reported Sep 14, 2026
Paradigm Healthcare Services data breach
Official record →
Reported Sep 14, 2026
Cambridge Mercantile data breach
Official record →
Reported Sep 14, 2026
Accela data breach
Official record →
Reported Sep 11, 2026
Catalyst Physician Group data breach
Official record →
Reported Sep 11, 2026
Cornerstone Staffing Solutions data breach
Official record →
Reported Sep 11, 2026
Suffolk Federal Credit Union data breach
Official record →
Reported Sep 11, 2026
zHealth data breach
Official record →
Reported Sep 9, 2026
Greenberg Traurig data breach
Official record →
Reported Sep 9, 2026
Quatrro Business Support Services data breach
Official record →
Reported Sep 8, 2026
Hibbett Retail data breach
Official record →
Reported Sep 4, 2026
Elixir Medical data breach
Official record →
Reported Sep 4, 2026
Catalyst Brands data breach
Official record →
Reported Sep 2, 2026
See's Candies data breach
Official record →
Reported Sep 2, 2026
Fiesta Insurance Franchise data breach
Reported Sep 2, 2026
HumanEdge data breach
Official record →
Reported Sep 2, 2026
YouLend US data breach
Reported Sep 2, 2026
Knowledge Research Center data breach
Official record →
Reported Sep 1, 2026
DeMera DeMera Cameron data breach
Official record →

Data-breach information is compiled from the California Attorney General's public breach-notification list. Class Action Buddy is not a law firm and is not affiliated with any regulator or the listed companies. Confirm details on each official record.