Cardinal Services, Inc., including Cardinal Employer Organization and Preferred Employer Solutions, experienced a data breach that was disclosed in 2026. The incident, attributed to the Rhysida ransomware group, involved unauthorized access to their systems over a six-week period between June 25, 2025, and August 8, 2025. This breach affected over 142,000 individuals.
The compromised data includes names, Social Security numbers, dates of birth, driver’s license/state ID numbers, financial account information, medical information, health insurance information, digital signatures, and biometric data. While notification letters began mailing on May 20, 2026, the full scope of the breach and any long-term consequences are still emerging. The company has stated that no confirmed identity theft or fraud has been linked to this incident yet. Cardinal Services is offering 12 months of free credit monitoring and identity theft protection to affected individuals.
More details may emerge as investigations continue and affected individuals receive their notices.