River City Data, also known as SKR Group Inc dba River City Data, reported a cybersecurity incident involving its scanning and document-management services. The company posted a notice of the incident on its website on June 26, 2026, and began sending notification letters to affected individuals on the same day. Disclosures were also made to the Massachusetts Office of Consumer Affairs and Business Regulation and the U.S. Department of Health and Human Services on June 26, 2026.
The incident potentially affected 1,718 individuals in the United States. Compromised data may include names, Social Security numbers, medical information, and health insurance information. It remains unclear if direct financial account data was exposed. While River City Data provides services that suggest a vendor role, it has not been confirmed if downstream customers were affected.
Additional details about the incident may emerge as investigations continue, and further notifications or regulatory actions could occur.