The Gladney Center for Adoption, a non-profit adoption and foster care agency, experienced a data breach in February 2025, discovered by a security researcher. A second incident, discovered on January 23, 2026, involved "certain files" with protected personal information.
The 2025 breach exposed over 1.1 million records including names, addresses, phone numbers, email addresses of individuals, and sensitive adoption-related data such as case notes, court documents, child protective services files, mental and medical health data, private assessments, internal communications, and email metadata. The 2026 incident also involved protected personal information. While no explicit mention of SSNs or financial data was made, mental and medical health data was involved.
Details about the full scope of individuals affected by the 2026 incident are still emerging. Notifications have been sent to affected individuals.