Bonick Landscaping, Inc. experienced a data breach stemming from a ransomware attack by the PLAY cybercriminal group, which reportedly gained access on April 10, 2025. The company began notifying affected individuals by mail on May 7, 2026. The breach was publicly reported on May 15, 2026, stemming from a Texas Attorney General filing, though specific filings were not found in the provided sources beyond a Massachusetts notice.
Data exposed in the breach may include names, Social Security numbers, driver’s license numbers, financial account information, government-issued ID numbers (including passports and credit/debit card numbers), state ID card numbers, medical information, and health insurance information. The Massachusetts notice specifically indicated first and last names and financial account information. The breach affected approximately 2,356 Texas residents and 1 Massachusetts resident. Bonick Landscaping is offering 24 months of credit monitoring and identity protection services through Experian IdentityWorks.
Details about the full scope of the breach and the total number of individuals affected globally remain unclear. Additional information may emerge as investigations continue and more public notices are issued.