The Data Breach Brief: Week of August 5th, 2026

The following data breaches have been announced this week—make sure you’re in the know.

If you received a data breach notice regarding any of the breaches listed below, act now and take Morgan & Morgan’s data breach quiz to see if you may be eligible for compensation.

Pennyroyal Healthcare Services

Pennyroyal Healthcare Services suffered a data breach on January 2, 2026, when an unauthorized actor accessed its network. The compromised data may contain specific types of personal information, including:

• Names and addresses
• Dates of birth and dates of death
• Social Security numbers and taxpayer identification numbers
• Driver’s license, state ID, and passport numbers
• Financial account and routing numbers
• Payment card numbers, PINs, and expiration dates
• Usernames and passwords
• Biometric data
• Medical record, patient ID, and patient account numbers
• Diagnoses, medical conditions, and treatment information
• Admission, discharge, and service dates
• Provider, prescription, and procedure information
• Billing, claims, and treatment cost information
• Health insurance and benefits information

HealthStream

HealthStream suffered a data breach when an unauthorized third party accessed and removed files from a limited portion of its corporate file server. The compromised data may contain specific types of information, including:

• Employee information
• Customer and vendor billing information
• Corporate and legal information
• Customer data associated with certain credentialing clients

Indico Data Solutions

Indico Data Solutions suffered a data breach when an unauthorized party accessed online repositories containing customer information. The compromised data may contain specific types of personal information, including:

• Names
• Addresses
• Social Security numbers

Analog Devices

Analog Devices suffered a data breach on June 23, 2026, when an unauthorized party accessed certain company systems and obtained files. The specific types of information involved have not been publicly disclosed.

Emanuel Medical Center

Emanuel Medical Center suffered a data breach between May 21 and 24, 2025, when an unauthorized third party accessed a portion of its systems. The compromised data may contain specific types of personal information, including:

• Names
• Dates of birth
• Contact information
• Social Security numbers
• Driver’s license and other government-issued identification numbers
• Health insurance information
• Patient identification numbers
• Dates of service
• Healthcare provider names
• Diagnoses
• Treatment information
• Prescription information
• Medical histories
• Laboratory reports

Sunrise Company

Sunrise Company suffered a data breach on April 23, 2026, when an unauthorized actor accessed its computer network and acquired certain files. The compromised data may contain specific types of personal information, including:

• Names
• Social Security numbers
• Other personal information that varied by individual

JRK Property Holdings

JRK Property Holdings suffered a data breach when an unauthorized party accessed certain files within its computer systems. The compromised data may contain specific types of personal information, including:

• Names
• Dates of birth
• Home addresses
• Social Security numbers
• Driver’s license and other government-issued identification numbers
• Financial account names and numbers

SM Energy Company

SM Energy Company suffered a data breach when an unauthorized third party accessed its network and obtained files containing personal information. The compromised data may contain specific types of personal information, including:

• Names
• Social Security numbers
• Tax identification numbers
• Addresses
• Phone numbers
• Email addresses

TELUS Digital

TELUS Digital suffered a data breach on November 12, 2025, when an unauthorized party accessed a limited number of its systems. The compromised data may contain specific types of personal information, including:

• Names
• Contact information
• Dates of birth
• Limited health information
• Financial account numbers

First Advantage Corporation

First Advantage Corporation suffered a data breach on or around November 13, 2025, when an unauthorized third party used a phishing attack to access an employee’s email account and download the contents of the inbox. The compromised data may contain specific types of personal information, including:

• First and last names
• Other personally identifiable information that varied by individual

If you or a loved one were affected by any of these data breaches, you may be entitled to compensation. Find out more in minutes with our online data breach quiz.