AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
Last Update: 09/22/2026 at 11:34 PM EST
Sensitive Data Breaches Reach Court
Coverage from Reuters, Big4News, and others
Organizations including Cushman & Wakefield, EY, WilmerHale, Wiley Rein, Hasbro, and Opexus face legal or regulatory scrutiny after breaches involving sensitive personal, financial, tax, employee, or client information.
The reported incidents include phishing, compromised accounts, third-party platform access, and alleged insider misuse, with several complaints challenging security controls and notification practices. The recurring significance is the conversion of data exposure into class-action claims, while the extent of misuse, affected records, and organizational responsibility remains disputed in several cases.
Looking Back
145 Day Timeline
Apr 7
May 1
May 25
Jun 18
Jul 12
Aug 5
Aug 29
History
09/17/2026
The story now includes Hasbro, where a cyberattack reportedly caused employee-data exposure alongside significant order-processing disruption and financial losses. This broadens the implications beyond privacy litigation toward measurable operational and business damage, while the core dispute over security failures, notification, and confirmed misuse remains unchanged.
08/04/2026
The story has become more specific about the kinds of incidents, data, and defendants involved, shifting from a broad breach-litigation theme to a clearer set of service-provider cases tied to client, tax, and government information. It also adds a more explicit dispute over whether reported harms and notification timelines are sufficient to support liability.
All Articles28 articles
Important
Jason Perry sued WilmerHale in federal court July 14, alleging a May cyberattack exposed personally identifiable information including Social Security numbers across multiple states.
7/15/2026 • Data Breaches & Exposure Events • General
In April 2026, Markishi Wyatt filed a proposed class action against EY in New York alleging a third-party platform breach exposed tax-related personal data.
7/24/2026 • Data Breaches & Exposure Events • General
Markishi Wyatt filed a proposed class action in the Southern District of New York alleging Ernst & Young inadequately protected client financial and tax data after unauthorized access to an IT service management platform.
7/21/2026 • Data Breaches & Exposure Events • General
Michelle Milewski filed a proposed class action in New York after Cushman & Wakefield confirmed a May 5 voice-phishing breach allegedly exposing client data.
5/15/2026 • Data Breaches & Exposure Events • General
A proposed class action in the Southern District of New York alleges Cushman & Wakefield failed to protect client personal data after a vishing-based cyberattack.
5/12/2026 • Data Breaches & Exposure Events • General
Kristi Meyers sued Columbia Bank in Seattle after a 7,067-person data breach, alleging Washington breach-disclosure violations tied to a 119-day notice delay.
5/15/2026 • Data Breaches & Exposure Events • General
Hasbro disclosed in a Massachusetts filing nearly five months after its March 28, 2026 intrusion that hackers exposed personal and financial information affecting at least 436 Massachusetts residents.
8/29/2026 • Data Breaches & Exposure Events • General
Derrick Burkett filed a proposed class action in Washington, D.C., accusing Wiley Rein of failing to protect Microsoft 365 data stolen via phishing and notifying victims around March 2026.
5/26/2026 • Data Breaches & Exposure Events • General
Interesting
Michelle Milewski dismissed a Southern District of New York class-action against Cushman & Wakefield after a reported voice-phishing breach exposed PII from 300,000-plus accounts.
6/3/2026 • Data Breaches & Exposure Events • General
Michelle Milewski dismissed a class-action privacy lawsuit against Chicago-based Cushman & Wakefield in the Southern District of New York after an alleged cyberattack involving ShinyHunters and Qilin.
6/2/2026 • Data Breaches & Exposure Events • General
A Providence federal class action alleges Hasbro failed to protect employee personal data after a March 28, 2026 breach and delayed breach notification.
4/17/2026 • Data Breaches & Exposure Events • General
CarGurus consumers voluntarily dismissed without prejudice on July 27, 2026, a consolidated Massachusetts federal lawsuit over a ShinyHunters breach allegedly affecting 12.5 million people.
7/28/2026 • Data Breaches & Exposure Events • General
Jason Perry filed a proposed class action in the US District Court for the District of Columbia against WilmerHale after a May data breach notification on July 10.
7/15/2026 • Data Breaches & Exposure Events • General
Columbia Pacific Advisors disclosed a breach investigation outcome in Washington state, after potential unauthorized access on November 28, 2025 exposed identity, financial, and medical data.
6/15/2026 • Data Breaches & Exposure Events • General
Latonia James filed a class action in Southern District of Florida alleging ADT failed to secure and disclosed customer PII after a April 20, 2026 network intrusion.
5/27/2026 • Data Breaches & Exposure Events • General
Jillian Russell Hauser filed a class action in Rhode Island federal court on April 22 against Citizens Bank over an alleged April 2026 PII breach involving dark web posting.
5/18/2026 • Data Breaches & Exposure Events • General
A Columbia Bank customer filed a proposed class action in Seattle federal court in 2026 over alleged 2025 data breach exposure of unencrypted Social Security and account numbers.
5/14/2026 • Data Breaches & Exposure Events • General
Betty Lackey filed a class action in Minnesota alleging Ameriprise failed to secure client PII after a March ShinyHunters ransomware breach.
4/17/2026 • Data Breaches & Exposure Events • General
A proposed class action filed in 2025 alleges Opexus failed to prevent a February 2025 insider-driven breach of sensitive federal records and delayed actionable breach notification.
4/7/2026 • Data Breaches & Exposure Events • General
Florida resident Derrick Burkett sued Washington, D.C. firm Wiley Rein in 2026, alleging delayed detection and notice of a cyberattack leading to dark-web sale of consumer data.
5/28/2026 • Data Breaches & Exposure Events • General
Michelle Milewski filed a proposed class action in the Southern District of New York after a reported ShinyHunters extortion cyberattack exposed client PII at Cushman & Wakefield.
5/13/2026 • Data Breaches & Exposure Events • General
Hasbro disclosed in 2026 that attackers accessed personal and financial information belonging to 436 employees in Massachusetts.
8/28/2026 • Data Breaches & Exposure Events • General
Judge Maria A. Lanahan on July 24 allowed a proposed class action against Walsworth Publishing Co. to proceed over a 2024 breach affecting over 100,000 people.
7/27/2026 • Data Breaches & Exposure Events • General
Columbia Pacific Advisors disclosed a data breach in which an unauthorized third party accessed network systems on or about Nov. 28, 2025, affecting Washington, Massachusetts, and Vermont residents.
6/25/2026 • Data Breaches & Exposure Events • General
Plaintiffs Beckwith, St. John, and Smith voluntarily dismissed without prejudice their ADT Inc. claims tied to a ShinyHunters voice phishing incident in Florida federal court.
6/12/2026 • Data Breaches & Exposure Events • General
A proposed US class action filed after ADT's April 2026 breach alleges cybersecurity failures exposed customer PII and inadequate breach notice.
5/15/2026 • Data Breaches & Exposure Events • General
Tina Clayton and PruittHealth Inc. filed a stipulation dismissing a data breach class action without prejudice in the Northern District of Georgia.
7/1/2026 • Data Breaches & Exposure Events • General
A class-action lawsuit against Hasbro alleges inadequate disclosure of accessed personal data after an earlier-month data breach in Providence, Rhode Island.
4/16/2026 • Data Breaches & Exposure Events • General