The Data Breach Brief: Week of June 24th, 2026

The following data breaches have been announced this week—make sure you’re in the know.

If you received a data breach notice regarding any of the breaches listed below, act now and take Morgan & Morgan’s data breach quiz to see if you may be eligible for compensation.

Xsolis

Xsolis suffered a data breach on January 22, 2026, due to a phishing incident that occurred two days prior, on January 20. The data breach involved files with sensitive, personal information, including:

• Names
• Addresses
• Dates of birth
• Health insurance information
• Social Security numbers
• Medical treatment information

Minnesota Epilepsy Group 

Minnesota Epilepsy Group recently disclosed a data breach stemming from a hacking incident involving its network server. The breach reportedly affected approximately 80,061 individuals and may have exposed sensitive personal and medical information. The potentially compromised data includes:

• Names
• Social Security numbers
• Medical information
• Health insurance information
• Other sensitive personal information

Passco Companies, LLC

Passco Companies, LLC (“Passco”) recently suffered a data breach when cybercriminals infiltrated its inadequately secured network and gained access to its files. Cybercriminals potentially accessed and removed files containing the sensitive personal information of thousands of individuals, including:

• Names
• Social Security numbers
• Financial account information
• Credit/debit card information
• Medical information
• Health insurance information
• Driver’s license numbers
• Passport information
• Addresses

Pearlman, Brown & Wax LLP

Pearlman, Brown & Wax LLP (“PBW”) suffered a data breach on or around March 27, 2026, when an unauthorized individual gained access to PBW’s network for a limited period of time and may have accessed certain files in its network. The compromised data contained sensitive, personal information, including:

• Names
• Social Security numbers
• Medical and treatment information related to workers’ compensation claims

Casino, LLC 

Casino, LLC dba Larry Flynt’s Lucky Lady Casino suffered a data security breach between May 14th, 2025, and May 18th, 2025, when an unauthorized actor gained access to the company’s computer systems and servers, and exfiltrated data. The formal breach discovery was not recorded until April 13th, 2026, and consumer notifications began on June 10th, 2026, approximately thirteen months after the intrusion. The compromised data may include: 

• Names
• Dates of birth
• Social Security numbers
• Driver’s license or state ID numbers
• Passport numbers
• Health insurance information
• Financial information, such as account or credit and debit card numbers
• Medical information

If you or a loved one were affected by any of these data breaches, you may be entitled to compensation. Find out more in minutes with our online data breach quiz.