September 2026 Data Breaches

A December 2024 report alleged that LenselS2 was affected by a data breach involving corporate records and potentially client-related information. The report did not confirm the incident or provide an affected-person count.

A September 2026 report says First Technology Federal Credit Union experienced a data breach around August 18, 2026, that may have exposed personal information. Specific data types and the number of affected members have not been disclosed.

Crossett Inc. was listed in a ransomware-group post observed by RansomLook on September 26, 2026. The reported data breach has not been confirmed by the company or a regulator, and the affected information and number of people remain unknown.

A Claim Depot page described a Redfin data breach lawsuit investigation in 2026, but the available sources do not confirm that a Redfin data breach occurred or provide incident details.

Gallagher Transport International Inc. reported a 2026 data breach affecting more than 1,100 individuals, according to a Vermont Attorney General filing described on the source page. The specific information involved and breach date have not been publicly disclosed.

Harbor Fish Market reported a data breach affecting at least 13 Vermont residents in 2026, according to a breach page updated September 25. The specific data involved and breach date have not been publicly disclosed.

Cipher Systems (cipher.systems) was listed by Ransomware.live in connection with a reported data breach on September 26, 2026. The incident has not been confirmed by the company or a regulator in the available sources.

Ransomware.live reported a possible International Chemical Co. data breach in 2026, alleging files were taken from its main file server. The company has not publicly confirmed the reported incident in the available sources.

Structural and Steel Products reported a data breach in 2026 that affected Texas residents, exposing personal and financial information.

Peña & Bromberg, a legal-services organization, experienced a data breach discovered on May 7, 2026. This incident involved unauthorized access to the firm's network and files.

Breast Implant Center of Hawaii was listed by ransomware.live as a possible data breach victim on September 25, 2026. The report remains unconfirmed, and no affected count or exposed data types have been disclosed.

Ladenburg Thalmann & Co. Inc. experienced an email phishing data breach in 2026, potentially exposing personal information of at least 68 individuals.

Millstone Medical Outsourcing, LLC reported a data breach in 2026 involving unauthorized access to company data between December 15 and 19, 2025. The number of affected individuals has not been publicly disclosed.

Fairwinds Credit Union disclosed a data breach in 2026 involving a cybersecurity incident at its external service provider, Mercadien. The notice does not specify the data elements or total number of affected members; approximately 39 Rhode Island residents may be affected.

GE Vernova Inc. was listed by Ransomware.live as a MetaEncryptor ransomware victim in a reported data breach dated September 25, 2026; the incident has not been publicly confirmed by the company or a regulator in the available sources.

Gold Star Mortgage Financial Group reportedly faced a possible data breach in 2026 after a hacker group claimed an attack, but the company had not confirmed the incident. The affected count and data types have not been disclosed.

GTFM LLC was listed in a ransomware report as a possible data breach victim on September 25, 2026. The report does not confirm the breach or identify affected data or individuals.

TapClicks was listed in a reported data breach in 2026 by ransomware group N0n. The report described exposed platform and customer marketing data, but the incident has not been publicly confirmed by the company or a regulator.

A ransomware.live listing reported a 2026 data breach involving Platinum Healthcare Staffing, with an attack date of September 25. The report has not been confirmed by the company or a regulator, and affected individuals and data types have not been disclosed.

A ransomware tracker reported a suspected Tobin & Company data breach on September 25, 2026. The report did not confirm the data involved or the number of people affected.

All Tech Machine & Engineering was listed as a Qilin ransomware victim in a reports-only data breach listing dated 2026-09-24. The listing did not describe the data involved or the number of people affected.

The Lee County Mosquito Control District data breach was reported to the Vermont Attorney General’s Office in 2026. The filing confirms that at least one Vermont resident was affected and that exposed information included Social Security numbers and financial account data.

AngMar Management Services reported a 2026 data breach involving Social Security numbers and medical information. The company reported that nine New Hampshire residents were affected, while the total number affected across its service area has not been publicly disclosed.

Westside GI was listed by a ransomware tracker in connection with a reported data breach in 2026. The incident has not been confirmed by the company or a regulator in the available sources.

Indroj Medical Group Inc. was listed by ransomware.live as a victim of a ransomware incident dated 2026-09-24. The report does not confirm a data breach or disclose what information, if any, was accessed.

Prater, Ridley & Llamas – Attorneys at Law was listed as a suspected data breach victim on ransomware.live on September 24, 2026. The report does not confirm that data was accessed or disclose an affected count or data types.

Welgen One was listed in a reported 2026 data breach by the ransomware group Incransom on September 24, 2026. The report has not been independently confirmed, and the number of affected individuals and data types have not been disclosed.

A ransomware tracker reported a Strack Companies data breach on September 24, 2026, but the incident has not been confirmed by the company or a regulator. The tracker said the Akira group claimed it would publish corporate data, including employee information and project materials.

A RansomLook listing attributed Applied Composites to the Storm group on September 24, 2026, but a data breach has not been officially confirmed in the available sources. The exposed information and number of affected people are unknown.

ENKEI was listed by ransomware tracker RansomLook in a 2026 data breach report attributed to The Gentlemen; the incident has not been publicly confirmed in the provided sources.

Azure Farms, Inc., doing business as Azure Standard, reported a data breach involving customers’ financial information to the Vermont Attorney General in 2026. The breach date and number of affected individuals have not been publicly disclosed.

A ransomware tracker reported an eTeam data breach in 2026, listing September 24 as the attack date. The incident has not been officially confirmed in the available source.

A ransomware tracker reported a Martin Lawrence Galleries data breach in 2026, listing September 24 as the attack date. The incident has not been confirmed by the company or a regulator in the available sources.

Arizona Vascular Medical Equipment, Inc. was listed in a reports-only 2026 data breach connected to an alleged DragonForce ransomware attack on September 24, 2026. The affected individual count and data types have not been publicly confirmed.

SMAPCENTER-UAH.EDU was listed by a ransomware tracker as a possible data breach victim on September 23, 2026; no official confirmation or details about exposed data have been found.

Tessco Technologies, Inc. experienced a data breach in 2026. Official filings confirm exposed Social Security numbers and financial account data, with at least two individuals affected.

CLOUD-CLEARWAYGROUP.COM was listed in a reports-only 2026 data breach entry attributed to the Clop ransomware group. No official confirmation, affected count, or compromised data types have been publicly confirmed.

A ransomware tracker reported a Columbia Banking System data breach on September 23, 2026, but the incident has not been publicly confirmed by the company or a regulator. The affected count and data types have not been disclosed.

A ransomware tracker reported a Washington County, Maine, data breach in 2026, attributing the incident to Booba Project and claiming 2 GB of data was stolen. The county has not been confirmed as having disclosed the incident in the available sources.

The Friesen Group reported a 2025 data breach after an unauthorized user accessed its network. A California Attorney General notice dated September 21, 2026, states that names and other potentially sensitive information may have been involved, but no affected-person count has been disclosed.

A ransomware tracker reported an alleged Merrimack County data breach in 2026, listing September 23 as the attack date and 3 GB of stolen data. The county has not officially confirmed the incident in the sources reviewed.

BRILLONCONSUMER.COM was listed by Ransomware.live as a Clop victim in a reported data breach dated 2026-09-23; the incident has not been confirmed by a company or regulator in the available sources.

A ransomware-tracking record reported a Trump Mobile data breach in 2026, claiming that eSIM QR codes and unspecified personal information were exposed. The report is unconfirmed, and the number of affected individuals has not been established.

A ransomware tracker reported a possible goldstarfinancial.com data breach in 2026, allegedly involving the BrainCipher group. The company identity and breach details have not been independently confirmed.

A ransomware-tracking source reported a Kirkland & Ellis LLP data breach in 2026, listing the firm as a Clop victim on September 23. The firm or a regulator has not publicly confirmed the incident in the available sources.

Lakes Region Visiting Nurse Association reported a 2026 data breach involving unauthorized access to an employee email account on June 2, 2026. The organization said certain personal information may have been affected, but the affected data types and number of individuals remain undisclosed.

A ransomware tracker reported that Urban Engineering was targeted in a data breach in 2026, but the company has not been shown to confirm the incident. The listing claimed the Akira group planned to upload corporate data; the types of information and number of people affected are unknown.

Apex Litigation Support was listed in an unconfirmed ransomware data breach report dated 2026. The report claimed corporate data and employee and client personal information were targeted, but the affected count and specific data types have not been confirmed.

Virginia A Lemon PLLC (Lemon Law) was listed by a ransomware tracker as a victim of a data breach in 2026, with an alleged attack date of September 23. The report has not been independently confirmed, and the number of affected individuals is unknown.

Smart Eye Care was listed in a ransomware-tracker report as experiencing a data breach in 2026; the report says 7 GB of data was stolen, but the company has not publicly confirmed the incident in the material reviewed.

A ransomware.live report listed KSS Architects LLP in a 2026 data breach entry, with an attack date of September 23, 2026. The incident has not been confirmed by the company or a regulator in the available sources.

The Woodlands Arts Council data breach was reported in 2026 after the Texas nonprofit notified clients of a data event involving personal information. The organization has not disclosed the affected-person count, incident date, or specific data types.

Museum Associates d/b/a Los Angeles Museum of Art (LACMA) experienced a data breach in 2025, with notices sent to affected individuals in August 2026.

theLender was listed in a reports-only 2026 data breach report by Ransomware.live on September 22, 2026. The report does not confirm the affected data types or number of affected individuals.

RansomLook reported a possible NAI Earle Furman data breach in 2026 involving a file-server tree tied to brokerage, property-management, employee, and Croxton Gray data. NAI Earle Furman and a government regulator have not publicly confirmed the report, and the number of affected individuals is unknown.

Sealcon was listed in a reports-only 2026 data breach report by Ransomware Live, which attributed the incident to the Termite ransomware group. The report does not state how many individuals were affected or what data was involved.

Cozen O’Connor was listed in a reports-only 2026 data breach entry by the ransomware tracker Ransomware.live on September 22, 2026. The company has not publicly confirmed the incident, affected count, or compromised data types in the sources reviewed.

TruAmerica Multifamily was listed in a reports-only 2026 data breach claim by the Termite ransomware group. The available report does not confirm the affected population or data types.

American Service Center Associates, LLC reported a 2026 data breach involving a security incident that may have affected some customers. A notice filed with the Massachusetts Attorney General on September 18, 2026, did not disclose the number of affected individuals or specific data types.

Ransomware.live reported an alleged Coe Press Equipment data breach in 2026 involving a claimed Akira ransomware attack. The listing mentioned employee Social Security numbers and driver's licenses, but the company had not publicly confirmed the report and no affected-person count was disclosed.

Ridgeway Pharmacy Ltd experienced a third-party website security incident in 2026, which may have affected 15 million patients.

SCF Realty Funding LLC reported a data breach in 2026 involving clients’ personal information. The September 18, 2026 notification identified names and other unspecified personal data elements, but did not disclose the number of affected individuals or confirm exposure of Social Security numbers, medical information, or financial account information.