The Data Breach Brief: Week of October 14th, 2026
Injured?
The following data breaches have been announced this week—make sure you're in the know.
If you received a data breach notice regarding any of the breaches listed below, act now and take Morgan & Morgan's data breach quiz to see if you may be eligible for compensation.
DriveWealth, LLC
DriveWealth, LLC suffered a data breach between September 4 and September 5, 2026, when an unauthorized party gained access to its network and removed personal information. DriveWealth provides brokerage services behind many consumer investing apps, so affected individuals may not have signed up with the company directly. The compromised data may contain specific types of personal information, including:
- Names
- Social Security numbers
- Financial account information
- Credit or debit card numbers
iRhythm Technologies, Inc.
iRhythm Technologies, Inc. suffered a data breach between June 3 and June 8, 2026, when an unauthorized party accessed and downloaded data from certain third-party-hosted business applications. The compromised data may contain specific types of personal and health information, including:
- Names
- Addresses
- Email addresses and phone numbers
- Dates of birth
- Medical information
- Health insurance information
Harman Fitness, LLC
Harman Fitness, LLC, a Crunch Fitness franchise operator, suffered a data breach on September 4, 2025, when an unauthorized party gained access to its network and certain files containing personal information. The compromised data may contain specific types of personal, financial, and health information, including:
- Names
- Addresses
- Dates of birth
- Social Security numbers
- Driver's license or state identification numbers
- Passport numbers
- Financial account information, including credit or debit card numbers and bank account numbers
- Medical information
- Health insurance information
Blueberry Pediatrics
Blueberry Pediatrics, which provides care as Blueberry Medical, suffered a data breach discovered on August 22, 2026, after an unauthorized party exploited a vulnerability in a third-party data analytics platform and copied a portion of its patient data. A separate incident involving a prescription services provider used by the practice affected additional information. The compromised data may contain specific types of personal and health information, including:
- Names
- Dates of birth
- Health plan names and policy numbers
- Medical records, dates of service, and medical codes
- Charges for services
- Prescription information
If you or a loved one were affected by any of these data breaches, you may be entitled to compensation. Find out more in minutes with our online data breach quiz.
