Bestätigt

Cardinal Services: two intrusions exposed SSNs, medical and biometric data

Cardinal learned of unauthorised access around June 30, 2025 and again on August 8, 2025; on May 12, 2026 it found that systems accessed on June 25–26 and around August 8, 2025 contained names, dates of birth, SSNs, driver’s licence/state ID numbers, financial account, medical and health insurance information, digital signatures and biometric information.

Zuletzt aktualisiert: 2026-11-09

Dieser Inhalt wird auf English angezeigt.

Überblick

Notifications began May 20, 2026. Ransomware groups claimed the attacks but the company has not confirmed this, so the method is recorded as unknown. No total is given. The first-disclosure date is the earliest public document confirmed (California AG posting); no 2025 public disclosure was found in other state AG lists, HHS or company notices checked.

Zeitlicher Ablauf

  1. Vorfall
  2. Entdeckt
  3. Bekanntgegeben

Reaktion der Organisation

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

Was Sie tun können

Verify notices through official channels, avoid links in unexpected messages, do not provide credentials, and review credit reports and statements.

Quellen

  1. Sample consumer notice filed with California AG (Cardinal Services, Inc, Cardinal Employer Organization, and Preferred Employer Solutions, collectively (“Cardinal”))California Department of Justice, Office of the Attorney General · 2026-11-09
  2. California AG data breach report: Cardinal Services, Inc, Cardinal Employer Organization, and Preferred Employer Solutions, collectively (“Cardinal”)California Department of Justice, Office of the Attorney General · 2026-11-09
  3. Cardinal Services: Notice of Data Security IncidentCardinal Services · 2026-11-09

Zugehörige Informationen

Information melden

Noch keine veröffentlichten Informationen

Informationen erscheinen nach Quellenprüfung oder Moderation.

Kommentare und Antworten

Kommentar schreiben

Ohne Konto. Kommentare erscheinen sofort.

Keine privaten Namen, Adressen, Passwörter oder Codes veröffentlichen. Automatische Maskierung ist begrenzt: vor dem Absenden prüfen.