River City Data, a Minnesota-based provider of document digitization and processing services, reported that an unauthorized actor accessed its environment on February 2, 2026. The company determined that an unknown third party obtained data stored on its system between November 17, 2025, and January 15, 2026. River City Data began notifying affected individuals on June 26, 2026. The potentially affected information varied by individual and may have included names, dates of birth, addresses, Social Security numbers, health insurance information, medical record numbers, and health information. The entity-level number of affected individuals has not been publicly disclosed in the sources reviewed. Attorneys working with ClassAction.org and Cole & Van Note have announced investigations into whether a class action lawsuit can be filed; no filed lawsuit or named plaintiff was identified.