New York Data Breaches

A ransomware tracker reported a suspected Tobin & Company data breach on September 25, 2026. The report did not confirm the data involved or the number of people affected.

The Friesen Group reported a 2025 data breach after an unauthorized user accessed its network. A California Attorney General notice dated September 21, 2026, states that names and other potentially sensitive information may have been involved, but no affected-person count has been disclosed.

Lake Beverage was listed in a reports-only 2026 data breach report by Ransomware.live. The Settra ransomware group reportedly targeted the Rochester, New York, beer distributor, but affected individuals and compromised data types have not been publicly confirmed.

Prestige Management Inc. was listed in a reported 2026 data breach claim by the Akira ransomware group. The reported claim involved approximately 20 GB of corporate data, but the breach and any exposure of personal information have not been officially confirmed.

Gastroenterology & Hepatology of Central New York experienced a data breach in March 2026, which was confirmed in August 2026 to have involved patient information. The extent of affected individuals and specific data types has not been fully disclosed.

The United Federation of Teachers was listed in a reports-only 2026 data breach claim by the N0n ransomware group. The report alleged access to union legal, personnel, labor-contract, and health-benefit-fund case materials, but no official confirmation or affected-person count was available.

Suffolk Credit Union reported a 2026 data breach involving unauthorized access at former vendor Mercadien, P.C., CPAs. The incident occurred in 2025 and may have exposed names and other unspecified personal information belonging to some New York members.

Hinman Straub was listed in a reported 2026 data breach by RansomLook, which attributed the listing to the Storm ransomware group. The breach has not been independently confirmed, and the affected data and number of individuals remain unknown.

Community Wellness Partners was listed in a reports-only September 2026 data breach listing attributed to the Incransom ransomware group. The affected individual count and exposed data types have not been publicly confirmed.

Party Rental, a U.S. event rental company, reportedly experienced a data breach discovered on August 26, 2026.

Senvest Capital was listed in a reports-only 2026 data breach entry posted by the ransomware group The Gentlemen and recorded by RansomLook. The affected individual count and compromised data types have not been publicly confirmed.

Columbia University data breach in 2026 was listed by a ransomware tracker on 2026-08-14, but the incident has not been publicly confirmed in the materials provided. The available record names Columbia University Information (Dental) and does not confirm the affected count or data types.

Plaza Auto Mall data breach reports surfaced in 2026 on RansomLook, but the incident has not been publicly confirmed by the company or a regulator. The available source does not state what data, if any, was exposed.

Zion Contracting data breach in 2026 was listed on RansomLook as a The Gentlemen victim post, but the incident has not been publicly confirmed by the company or regulators.

United Group of Companies data breach in 2026 was reported by RansomLook on 2026-08-07, but no official confirmation has been identified. The available material does not disclose what data, if any, was exposed.