The Data Breach Brief: Week of July 27th, 2026

The following data breaches have been announced this week—make sure you’re in the know.

If you received a data breach notice regarding any of the breaches listed below, act now and take Morgan & Morgan’s data breach quiz to see if you may be eligible for compensation.

Saint Pete MRI

Saint Pete MRI disclosed a data breach after detecting suspicious activity within its network on or around February 23, 2025. Certain files containing personal and protected health information may have been accessed without authorization. The compromised data may include:

● Names
● Dates of birth
● Social Security numbers
● Driver’s license or state identification numbers
● Medical information
● Health insurance information

Madera Community Hospital

Madera Community Hospital suffered a data breach between May 28 and 29, 2025, when an unauthorized third party accessed the network. Certain files may have been acquired, and the compromised data may contain specific types of personal information, including:

● Names
● Contact information
● Login credentials
● Financial account information
● Government-issued identification numbers
● Medical record and other medical information
● Health insurance information

BAYADA Home Health Care, Inc.

BAYADA Home Health Care, Inc. suffered a data breach between February 18 and March 2, 2026, when an unauthorized actor accessed certain systems and data. The compromised data included specific types of personal information, including:

● Names
● Social Security numbers
● Dates of birth
● Driver’s license or other government-issued identification numbers
● Financial account information
● Credit or debit card information
● Medical diagnoses and treatment information
● Healthcare provider information
● Health insurance information
● Prescription information
● Hospital admission and discharge information
● Disability information

ZenPatient, Inc.

ZenPatient, Inc. disclosed a data breach after detecting suspicious activity within its computer systems on February 27, 2026. An investigation determined that an unauthorized actor accessed and copied certain data between December 5, 2025, and February 12, 2026. ZenPatient completed its review of the affected information on July 1, 2026, and began notifying affected individuals on July 17, 2026.

The compromised data included specific types of personal information, including:

● Names
● Addresses
● Dates of birth
● Medical information

VCA Animal Hospitals

VCA Animal Hospitals suffered a data breach on June 19, 2026. The company’s public notice did not disclose how the incident occurred or when it was discovered.

The compromised data included specific types of personal information, including:

● Names
● Bank account information

Apex Maritime Co., Inc. dba K-Apex

K-Apex disclosed a data security incident in a notice dated July 9, 2026, stating that some personal information may have been affected. The company did not publicly disclose when the incident occurred, how it was discovered, or the specific categories of information involved.

The specific types of personal information potentially involved have not been publicly disclosed.

BUNN Commercial, LP

BUNN Commercial, LP disclosed a data breach after discovering a cybersecurity event that may have involved personal information maintained by the company. BUNN reported the incident to Massachusetts regulators and began notifying affected individuals on or around July 20, 2026. The company did not publicly disclose when the event occurred or was discovered.

The specific types of personal information potentially involved have not been publicly disclosed.

Family Farm & Home

Family Farm & Home disclosed a cybersecurity incident involving unauthorized access to certain systems. The company’s public notice did not disclose when the incident occurred or was discovered. Regulatory filings indicate that Social Security numbers may have been involved.

The compromised data included specific types of personal information, including Social Security numbers.

The Lawson Roofing Co., Inc.

The Lawson Roofing Co., Inc. disclosed a data breach after identifying unusual activity within its network on or around April 28, 2026. An investigation determined that certain information may have been accessed and copied without authorization between April 23 and April 28, 2026. The company completed its review of the affected data on July 8, 2026.

The specific types of personal information potentially involved have not been publicly disclosed.

Safetyfirst Systems, LLC

Safetyfirst Systems, LLC disclosed a data breach after detecting suspicious activity on its computer network. A subsequent forensic investigation determined that an unauthorized actor gained access to the network and may have accessed or acquired files containing personal information. The incident affected approximately 4,504 Texas residents.

The compromised data included specific types of personal information, including:

● Names
● Social Security numbers
● Driver’s license numbers

McEwen & Associates, Inc.

McEwen & Associates, Inc. disclosed a cybersecurity incident involving personal, financial, and healthcare information. According to a filing with the Texas Attorney General, the incident affected approximately 4,098 Texas residents. The public filing did not provide additional details about when the incident occurred or how it was discovered.

The compromised data included specific types of personal information, including:

● Names
● Social Security numbers
● Driver’s license numbers
● Other government-issued identification numbers
● Financial information
● Medical information
● Health insurance information

Radia, Inc. P.S.

Radia, Inc. P.S. was named as an alleged victim by the Chaos ransomware group in a dark-web listing published on July 16, 2026. Public reporting has not confirmed the date or scope of any unauthorized access, and Radia has not publicly disclosed what information, if any, may have been involved.

The specific types of personal information potentially involved have not been publicly disclosed.

If you or a loved one were affected by any of these data breaches, you may be entitled to compensation. Find out more in minutes with our online data breach quiz.