United States Archives

Candy Maker Hit In Ransomware Attack

April 11, 2026

Los Angeles, California- based candy manufacturer, See’s Candies suffered a ransomware attack in April and stolen personal information ended up on the Dark Web.
See’s Candies ended up notified on April 12 an unauthorized user accessed certain portions of its network and encrypted files on a subset of its servers.
“We immediately launched an investigation and remediation effort with the assistance of outside cybersecurity experts and notified law enforcement,” the company said in a notice to victims of the attack. “Our investigation determined that there was unauthorized access to portions of our network from April 11, 2026 to April 13, 2026.

Trucking Firm, May Trucking, Suffers Cyberattack

June 21, 2026

Salem, Oregon-based transportation provider, May Trucking Company suffered a cyberattack in June where personally identifiable information ended up stolen in the hack.
“On June 21, 2026, we detected suspicious activity within our network and immediately initiated an investigation,” the company said in a notice to victims of the attack. “We also engaged independent cybersecurity specialists to assist with the process.”
As a result of the investigation, the company found certain files ended up acquired without authorization at the time we detected the incident.

Universal Plant Services Suffers Cyberattack

June 8, 2026

Industrial services provider, Deer Park, Texas-based Universal Plant Services, LLC suffered a cyberattack in June where personally identifiable information ended up stolen in the hack.
“On June 12, 2026, we became aware of unauthorized activity on our computer network and immediately engaged third-party forensic specialists to determine the full nature and scope of the event,” the company said in a notice to victims. Furthermore, “this investigation confirmed an unauthorized individual accessed data within the Universal Plant Services network from June 8, 2026, through June 12, 2026.”
The company conducted an investigation, and determined the types of information contained and to whom the information belonged. Furthermore, the company completed this review July 14 and proceed to provide notification of this event.

Cyberattack at USA DeBusk

September 5, 2025

USA DeBusk LLC suffered a cyberattack in September last year and is now informing victims their personally identifiable information ended up stolen in the hack.
“USA DeBusk LLC experienced a cybersecurity incident on or around September 5, 2025, involving unauthorized access to certain of our systems,” the company said in a notice to victims. “Based on our investigation, we determined on July 6, 2026, that, in connection with this issue, an unauthorized third party obtained certain of your personal information.”
The types of impacted information varied by affected individual, but stolen information included name, contact information like postal and email address and telephone number.

Skin Care Manufacturer, Malin + Goetz, Hit in Cyberattack

May 22, 2026

New York, New York-based personal care product manufacturer Malin + Goetz suffered a cyberattack in May where personally identifiable information ended up stolen in the hack.
“On June 15, 2026, we received confirmation from a third-party service provider relating to a potential compromise on our website which we were investigating,” the company said in a notice to victims. “The investigation into the activity identified unauthorized code on our site that may have captured certain information entered on the checkout/payment page, at times between May 22, 2026 and June 10, 2026.”
As a result of the investigation, the company took immediate action to analyze the transactions identified as at risk and determine which customers’ information the threat actor could have taken. Once the company determined that, they would notify them.

Biotech Giant Amgen Hit In Cyberattack

July 2, 2026

Thousand Oaks, California biotechnology producer, Amgen Inc. suffered a cybersecurity incident in July where personally identifiable information ended up stolen in the hack.
“On or about July 2, 2026, Amgen became aware of an unauthorized third party access to certain Amgen systems and data stored in cloud environments hosted by third party cloud service providers,” the company said in a notice to victims. “Upon discovering the incident, Amgen promptly commenced an investigation and engaged independent cybersecurity forensic experts.
In the investigation, on July 18, 2026, Amgen identified the unauthorized third party had obtained access to and acquired certain files containing patient personal information and health information.

Ransomware Attack at Advanced Power Services

November 12, 2025

Boston, Massachusetts-based power generation infrastructure provider, Advanced Power Services (NA) LLC, suffered a cyberattack in August last year and is now informing victims their personally identifiable information ended up stolen in the hack.
Advanced Power Services just notified victims an unauthorized third party accessed a portion of its computer network between August and November 2025, exposing some of their personal information.
As it turns out, the company detected suspicious activity within a portion of its computer network on November 12, 2025.

TX Conduit Maker, Cantex, Hit in Attack

August 21, 2026

Fort Worth, Texas-based Cantex, Inc., a maker of nonmetallic electrical conduit, suffered a cyberattack where personally identifiable information ended up stolen in the hack.
The breach ended up reported to the Texas Attorney General on Aug. 21, with 1,568 Texas residents identified as affected. Because Cantex’s headquarters is in Texas and this figure represents only the state-mandated Texas-resident count, the true nationwide scope of the incident could be higher if the exposed systems also stored information belonging to employees, vendors, or customers located outside the state.
Stolen in the hack were individuals’ names, home addresses, Social Security numbers, financial account information, and health insurance information. Not only were customers hit in the attack, so too were employees.

Cyberattack at Jasper-Newton Electric Cooperative

August 18, 2026

Kirbyville, Texas-based Jasper-Newton Electric Cooperative, Inc. suffered a cyberattack where 257 people fell victim to the attack when personally identifiable information ended up stolen in the hack.
The cooperative reported the incident to the Texas Attorney General on August 18. Stolen in the attack were victims’ names, Social Security number information and driver’s license number.
When the incident occurred was not immediately available. Jasper-Newton Electric Cooperative is a non-profit electric utility provider headquartered in Kirbyville, TX.

Cyberattack at Toy Maker Hasbro

March 28, 2026

Multinational toy manufacturing and media company, Hasbro, Inc. suffered a cyberattack where personally identifiable information ended up stolen in the hack.
Pawtucket, RI-based Hasbro said it implemented containment and remediation measures, including disabling the compromised employee account, terminating unauthorized access, and deploying additional safeguards designed to help prevent a similar incident from occurring in the future. The company disclosed attackers accessed the personal and financial information of an undisclosed number of employees.
Information stolen in the attack involved name and one or more additional personal information elements such as email, address, phone number, national ID number, or financial information, credit or debit card, social security and driver’s license numbers.
Hasbro told Massachusetts regulators the attack traced back to vishing and social engineering, the practice of tricking an employee or help-desk worker into handing over access rather than breaking through a technical defense.

« Older Entries

Next Entries »