Overview
Clients were informed on January 9, 2026. Recorded once under the vendor. Fields are templated; no total is given. The first-disclosure date is the earliest public document confirmed (California AG posting); no 2025 public disclosure was found in other state AG lists, HHS or company notices checked. A filing aggregator lists an earlier state filing on March 10, 2026, but the primary document was not confirmed.
Timeline
- Occurred
- Discovered
- Disclosed
Organization response
Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.
What you can do
Verify notices through official channels, avoid links in unexpected messages, do not provide credentials, and review credit reports and statements.
Sources
- Sample consumer notice filed with California AG (illumifin Corporation)California Department of Justice, Office of the Attorney General · 2026-11-09
- California AG data breach report: illumifin CorporationCalifornia Department of Justice, Office of the Attorney General · 2026-11-09