Last Update: 09/22/2026 at 11:34 PM EST

Personal Data Breaches Through Trusted Access

Coverage from Federman & Sherwood, Heraldnet, and others

Personal Data Breaches Through Trusted Access topic image

Organizations across healthcare, utilities, finance, manufacturing, and technology are disclosing breaches involving Social Security numbers, contact and account details, and protected health information.

The incidents commonly involve weaknesses in third-party applications, phishing or social engineering, compromised credentials, or unauthorized access to network files. The disclosures show how trusted business systems and employee access can expose high-value personal data, while delayed findings, incomplete public details, consumer monitoring offers, and legal action remain recurring features of the response.

Looking Back
129 Day Timeline
Apr 13May 11Jun 8Jun 22Jul 20Aug 17
History
09/09/2026

The story is largely unchanged, but the current version adds clearer detail that Quantum Health’s compromise involved voice phishing and that some organizations offered 24 months of monitoring.

08/24/2026

The story has materially broadened with a possible TransUnion exposure affecting approximately 4.4 million consumers and a healthcare breach linked to voice phishing. It now emphasizes third-party applications and expands beyond the previously established utility, manufacturing, software, and distribution incidents.

All Articles20 articles
Important10 articles · CI Score 60 and above
Federman & Sherwood / Caroline Chesher
Federman & Sherwood began investigating an ASP Unifrax data breach reported to the Vermont Attorney General after exposure of Social Security numbers and health records.
7/23/2026 • Data Breaches & Exposure Events • General
Heraldnet / Jenna Millikan
A Fluke Corp. employee filed a Seattle class action on June 5 alleging delayed breach notification and inadequate cybersecurity after a 2025 incident exposing employee personal data.
6/12/2026 • Data Breaches & Exposure Events • General
CT Insider
Eversource Energy disclosed April phishing and social engineering attacks that compromised two employees and exposed personal data of 3,049 customers in Connecticut, Massachusetts, and New Hampshire.
6/3/2026 • Data Breaches & Exposure Events • General
R23 Law / Myrah Del Rosario
TransUnion reported a late-July 2025 breach affecting 4.4 million consumers after exposure of Social Security numbers and contact data via a Salesforce-connected system.
4/13/2026 • Data Breaches & Exposure Events • General
Claim Depot
Locus Technologies disclosed a Social Security number data breach and notified affected individuals in July 2026, with Massachusetts reporting on July 15 and TransUnion credit monitoring offered.
7/16/2026 • Data Breaches & Exposure Events • General
Claim Depot
Stanley Pearlman Enterprises disclosed a 2026 data breach to Massachusetts and Nebraska regulators and affected individuals, exposing PII and PHI including biometric data.
6/18/2026 • Data Breaches & Exposure Events • General
Claim Depot
Eversource Energy disclosed a phishing-related data breach affecting about 3,049 people, reported May 21, 2026 to the Maine Attorney General and notified consumers starting May 27, 2026.
5/22/2026 • Data Breaches & Exposure Events • General
GS Legal
Quantum Health identified unauthorized network access following a voice-phishing attack that accessed potentially sensitive employee information in Dublin, Ohio, between May 29 and June 1, 2026.
8/19/2026 • Data Breaches & Exposure Events • General
Federman & Sherwood / Caroline Chesher
Quantum Health disclosed a network breach affecting sensitive health and personal information after a vishing-enabled intrusion in California between May 29 and June 1, 2026.
8/18/2026 • Data Breaches & Exposure Events • General
Claim Depot
Quantum Health disclosed in July 2026 that unauthorized access in Dublin, Ohio, exposed personal and health information after a fraudulent call compromised its network.
7/30/2026 • Data Breaches & Exposure Events • General
Interesting10 articles · CI Score 45–59
Federman & Sherwood / Caroline Chesher
Federman & Sherwood is investigating a Fluke Corporation data breach reported to the Maine Attorney General after third-party application exploitation possibly exposed Social Security numbers.
5/26/2026 • Data Breaches & Exposure Events • General
Claim Depot
FoxTrot LLC disclosed an April 2026 breach to Caldwell Sutter Capital Inc., exposing consumer identifiers including Social Security numbers and triggering Experian IdentityWorks services.
6/29/2026 • Data Breaches & Exposure Events • General
Claim Depot
Fedcap Group disclosed a breach potentially exposing Social Security and driver license numbers, with filings to Massachusetts regulators and the Vermont Attorney General in June 2026.
6/26/2026 • Data Breaches & Exposure Events • General
Claim Depot
NCCER notified affected individuals in 2026 after a March 2025 breach involving Quilin file exfiltration, with Maine residents receiving mailed notices on May 1, May 15, and May 21.
5/26/2026 • Data Breaches & Exposure Events • General
Claim Depot
Southern California University of Health Sciences disclosed a 2026 data breach affecting about 2,206 people after file viewing and copying occurred March 23 to March 24, 2026.
5/20/2026 • Data Breaches & Exposure Events • General
ClassAction.org
Fluke Corporation disclosed a data breach in 2025 involving third-party application access and possible Social Security number, birth date, and disability indicator exposure, with analysis completed in 2026.
5/15/2026 • Data Breaches & Exposure Events • General
Claim Depot
FRCC disclosed an unauthorized file-copying data breach in March-April 2026, potentially exposing names and Social Security numbers for Texas and New Hampshire residents.
5/15/2026 • Data Breaches & Exposure Events • General
Claim Depot
Fluke Corp. reported a 2025-2026 data breach affecting 18,517 US residents, including Texas, Vermont, and Maine residents, with notifications beginning May 15, 2026.
5/14/2026 • Data Breaches & Exposure Events • General
Claim Depot
Universal Pure LLC disclosed a 2024 unauthorized-access data breach affecting Maine, Massachusetts, New Hampshire, and Texas residents, with identity protection via Cyberscout.
4/24/2026 • Data Breaches & Exposure Events • General
Class Action U
Loop Capital disclosed a February 2026 unauthorized network file access incident and offered 24 months of credit monitoring and identity protection.
5/21/2026 • Data Breaches & Exposure Events • General