The Data Breach Brief: Week of September 2nd, 2026

The following data breaches have been announced this week—make sure you’re in the know.

If you received a data breach notice regarding any of the breaches listed below, act now and take Morgan & Morgan’s data breach quiz to see if you may be eligible for compensation.

Northern Inyo Healthcare District (Aesto Health)

Northern Inyo Healthcare District suffered a data breach between December 2 and December 18, 2025, when an unauthorized individual viewed or acquired files on Aesto Health's systems, affecting individuals whose information was managed by its third-party data migration vendor, Aesto Health. The compromised data contains specific types of personal information, including:

• Names
• Dates of birth
• Social Security numbers
• Taxpayer ID numbers
• Medical information
• Health insurance information
• Driver's license numbers
• Government ID numbers
• Financial account details

Kern Psychiatric Health and Wellness Center (Genesis Healthcare Management)

Kern Psychiatric Health and Wellness Center suffered a data breach around April 2026, affecting individuals whose information was managed by its management company, Genesis Healthcare Management. Investigations revealed that files were accessed without authorization, including sensitive, private information such as: 

• Dates of birth
• Social Security numbers
• Driver's license numbers
• Government-issued ID numbers
• Medical record numbers
• Patient account numbers
• Medicare/Medicaid ID numbers
• Diagnosis and treatment information
• Prescription information
• Lab results
• Health insurance information
• Provider names and locations
• Dates of service

POLAM Federal Credit Union

POLAM Federal Credit Union suffered a data breach on or around May 20, 2025, when a former employee unauthorizedly accessed and exfiltrated a limited number of documents from its network. The compromised data contains specific types of personal information, including:

• Names
• Addresses
• Social Security numbers
• Driver's license numbers
• Passport numbers
• Financial account numbers (with or without passwords/routing numbers)
• Credit and debit card numbers
• Loan numbers
• Individual taxpayer identification numbers
• Alien registration numbers
• IRS e-file personal identification numbers
• Medical history, conditions, treatment, or diagnoses

Integrated Specialty Coverages, LLC

Integrated Specialty Coverages, LLC (ISC) suffered a data breach between June 8 and June 11, 2026, when a third party gained unauthorized access to its internal systems. The breach affected approximately 12,844 individuals, compromising data that contained specific types of personal information, including:

• Names
• Addresses
• Dates of birth
• Driver's license numbers
• Financial information (including account numbers and credit/debit card numbers)

If you or a loved one were affected by any of these data breaches, you may be entitled to compensation. Find out more in minutes with our online data breach quiz.