The Data Breach Brief: Week of September 16th, 2026

The following data breaches have been announced this week—make sure you’re in the know.

If you received a data breach notice regarding any of the breaches listed below, act now and take Morgan & Morgan’s data breach quiz to see if you may be eligible for compensation.

HILT-Trust 2020-A

HILT-Trust 2020-A and its underlying trusts and affiliates disclosed a data breach in September 2026 that affected thousands of individuals. The compromised data may contain specific types of personal information, including:

• Names
• Addresses
• Dates of birth
• Social Security numbers
• Other personal information

zHealth, Inc.

zHealth, Inc. suffered a data breach between January 20 and 21, 2026, when an unauthorized third party accessed its network environment and may have copied certain information. The compromised data may contain specific types of personal information, including:

• Names
• Medical information
• Health insurance information

Cornerstone Staffing Solutions, Inc.

Cornerstone Staffing Solutions, Inc. suffered a data breach between November 6 and 21, 2025, when an unauthorized actor may have accessed portions of the company’s network and removed certain data. The compromised data may contain specific types of personal information, including:

• Names
• Social Security numbers
• Other personal information contained in resumes and internal records

Catalyst Physician Group

Catalyst Physician Group suffered a data breach between December 2 and 18, 2025, when an unauthorized actor may have accessed and acquired patient information stored within the Amazon Web Services environment of its third-party vendor, Aesto. The compromised data may contain specific types of personal information, including:

• Names
• Protected health information
• Other personal information that varied by individual

Bridgeport Capital Services, Inc.

Bridgeport Capital Services, Inc. disclosed a data security incident that may have compromised personal information maintained by the company and Bridgeport Capital Funding, LLC. The exact date of the breach has not been publicly disclosed, and the compromised data may contain specific types of personal information, including:

• Names
• Email addresses and phone numbers
• Social Security numbers
• Driver’s license numbers
• Dates and places of birth
• Client business account numbers

If you or a loved one were affected by any of these data breaches, you may be entitled to compensation. Find out more in minutes with our online data breach quiz.