Service Provider

May 19, 2026

Midland, Texas-based industrial services provider, MPS Enterprises Inc., suffered a cyberattack in May where personally identifiable information ended up stolen in the hack.
MPS Enterprises reported a data security incident resulted in unauthorized access to personal information belonging to 481 Texas residents. Just after becoming aware of the cyberattack, the company launched an investigation to understand its nature and scope of everything that occurred.
The breach ended up discovered May 19 and the company began sending out notices July 31. In Texas, 481 residents ended up affected in the breach, while 675 individuals total fell victim to the attack.

June 8, 2026

Industrial services provider, Deer Park, Texas-based Universal Plant Services, LLC suffered a cyberattack in June where personally identifiable information ended up stolen in the hack.
“On June 12, 2026, we became aware of unauthorized activity on our computer network and immediately engaged third-party forensic specialists to determine the full nature and scope of the event,” the company said in a notice to victims. Furthermore, “this investigation confirmed an unauthorized individual accessed data within the Universal Plant Services network from June 8, 2026, through June 12, 2026.”
The company conducted an investigation, and determined the types of information contained and to whom the information belonged. Furthermore, the company completed this review July 14 and proceed to provide notification of this event.

September 5, 2025

USA DeBusk LLC suffered a cyberattack in September last year and is now informing victims their personally identifiable information ended up stolen in the hack.
“USA DeBusk LLC experienced a cybersecurity incident on or around September 5, 2025, involving unauthorized access to certain of our systems,” the company said in a notice to victims. “Based on our investigation, we determined on July 6, 2026, that, in connection with this issue, an unauthorized third party obtained certain of your personal information.”
The types of impacted information varied by affected individual, but stolen information included name, contact information like postal and email address and telephone number.

January 11, 2026

Global logistics provider, Denver, Colorado-based Gallagher Transport International Inc. (GTI) suffered a cyberattack in January and is just now informing victims their personally identifiable information ended up stolen in the hack.
“On January 11, 2026, GTI became aware of suspicious activity in its network in which an unauthorized third party gained access to certain systems within its network,” the company said in a notice to victims. “Upon becoming aware of this event, GTI promptly launched an investigation, with the assistance of third-party cybersecurity specialists, to determine the nature and scope of the event. GTI also took steps to secure its environment.”
Through its investigation, the company discovered an unauthorized third party copied certain files from the computer network on January 11.

April 15, 2026

Teaneck, New Jersey-based Cognizant Technology Solutions US Corporation suffered a cyberattack in April and is now informing victims their personally identifiable information ended up stolen in the hack.
“We are writing to notify you that a breach of security of your personal information occurred on or around April 21, 2026, at Cognizant Technology Solutions US Corporation,” said a letter to the victims of the attack. The breach started April 15 and the company discovered it by April 21.
The company said it has no reason to believe any information ended up misused at this point. However, they wanted to make sure victims of the attack were aware of the incident.

April 24, 2026

Environmental remediation and safety contractors, Azusa, California-based Alliance Environmental Group, LLC suffered a cyberattack where personally identifiable information ended up stolen in the hack.
“On May 7, 2026, Alliance became aware of suspicious activity in our network,” the company said in a notice to victims. “We promptly took steps to secure our systems and initiated an investigation into the nature and scope of the event.”
The investigation found certain files on Alliance systems ended up accessed or acquired without authorization from April 24 to May 7.

September 1, 2026

New Orleans, Louisiana-based ID verification service IDScan discovered in early September they suffered a cyberattack and the FBI is investigating the hack where at least 170 million U.S. and Canadian driver’s license information ended up stolen.
IDScan is an identity verification technology company that provides hardware and software solutions for businesses to scan, authenticate, and extract information from government-issued identity documents.
The company said in an advisory on its website “On or around September 1, 2026, IDScan.net received information indicating that certain data may have been accessed without authorization. Upon this discovery, we took immediate steps to secure our systems and engaged a team of third-party specialists to help determine the full nature and scope of the incident. This investigation is currently ongoing.”

June 8, 2026

Springfield, Illinois-based heavy equipment distributor, Roland Machinery Co., suffered a ransomware attack in Australia where personally identifiable information ended up stolen in the hack.
Founded in 1958 and owned by the Roland family, the company is one of the biggest heavy equipment dealers in the Midwest and is a major Komatsu dealership.
The attack ended up discovered June 8 and attackers made off with Social Security Numbers, financial account codes, credit and debit account info, and government identification numbers, according to a July 7 notice with the Vermont Attorney General.

March 10, 2025

Santa Fe Springs, California-based industrial electrical contracting provider, Johnson-Peltier Electric, Inc. suffered a cyberattack in March 2025 and it discovered one year later that personally identifiable information ended up stolen in the hack.
“On March 10, 2025, Johnson-Peltier detected suspicious activity related to certain systems within its environment,” the company said in a notice to victims. “We took steps to secure our environment and launched an investigation to determine the nature and scope of the incident.
Through its investigation ending on March 10, 2026, Johnson-Peltier determined an unauthorized actor gained access to its computer network and potentially copied a limited number of files.

August 16, 2025

Woburn, Massachusetts-based equipment provider, C.N. Wood Co. Inc., suffered a cyberattack in August last year and is now letting victims know their personally identifiable information ended up stolen in the hack.
“C.N. Wood recently experienced unauthorized access to its network environment,” then a company said in a notice to victims. “Upon learning of this issue, we contained the threat and immediately commenced a prompt and thorough investigation.
As part of its investigation, the company began working very closely with external cybersecurity professionals experienced in handling these types of incidents.
“Following a thorough forensic investigation and extensive manual document review, we discovered on May 6, 2026, that the files that were potentially accessed or acquired by an unauthorized third-party actor on August 16, 2025, contained some of your personal information,” the company said.