In 2025, Cardinal Services, Inc., Cardinal Employer Organization, and Preferred Employer Solutions, collectively referred to as “Cardinal,” experienced a data breach involving unauthorized access to their systems. The breach occurred between June 25, 2025, and August 8, 2025. Cardinal discovered the breach on May 12, 2026, and began notifying affected consumers on May 20, 2026.
The breach exposed the personal information of approximately 142,323 individuals. The types of data compromised include names, Social Security numbers, dates of birth, addresses, government identification numbers, medical information, financial information, financial account codes, and credit and debit card information. The incident affected residents in multiple states, including Maine and Vermont. While regulatory filings confirm these details, the full scope of potential impacts remains unclear.
Data breaches can have various consequences. It is important to stay informed about such incidents, as additional details sometimes emerge over time, and notification processes can experience delays.