On March 3, 2026, GapVax, a US-based company, was reportedly impacted by a ransomware attack attributed to the Play ransomware group. This information was primarily sourced from ransomware tracking sites, indicating an early victim listing without official company or regulatory confirmation.
Currently, there are no available details regarding the number of individuals affected, the specific types of data exposed (such as SSNs, medical, or financial information), or the states impacted. The company has not issued an official statement, and there are no known regulatory filings or breach notification letters.
As details can emerge later and notices may be delayed, ongoing monitoring is essential for updates.