Paradigm Healthcare Services
CA, US—not stated
Breached Disclosed
California AG
Official register
Data Breaches
Check your email or password
Find out whether your email address or a password are leaked somewhere.
-
-
Chess.com (2026)
chess.com4.7MaccountsBreached DisclosedHave I Been Pwned Verified- Email addresses
- Geographic locations
- Names
- Usernames
In August 2026, millions of records allegedly sourced from Chess.com were posted online. The data contained 7.3M rows with 4.6M unique email addresses, along with usernames, names, countries and data relating to users' Chess.com accounts. Analysis of the data suggested it had been obtained by scraping. When loaded into HIBP, 99% of the email addresses had already appeared in previous data breaches, further supporting the scraping theory. Read more about scrapes and data breaches. -
zHealth, Inc.
CA, US—not statedBreached DisclosedCalifornia AG Official register -
Suffolk Federal Credit Union
CA, US—not statedBreached DisclosedCalifornia AG Official register -
—not statedBreached DisclosedCalifornia AG Official register
-
Catalyst Physician Group
CA, US—not statedBreached DisclosedCalifornia AG Official register -
681peopleBreached DisclosedWashington State AG Official register
- Name
- Social Security Number
- Driver's License or Washington ID Card Number
- Financial & Banking Information
- Full Date of Birth
- Military ID Number
- Passport Number
- +4 more
-
zHealth, Inc.
WA, US1.3KpeopleBreached DisclosedWashington State AG Official register- Name
- Health Insurance Policy or ID Number
- Medical Information
-
McKesson
mckesson.com6.4MaccountsBreached DisclosedHave I Been Pwned Verified Sensitive- Dates of birth
- Email addresses
- Employers
- Genders
- Names
- Personal health data
- Phone numbers
- +1 more
In August 2026, healthcare and pharmaceutical company McKesson was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published a substantial corpus of data they alleged was sourced from the company, which included 6.4M unique email addresses among other personal and corporate data attributes. The impacted data related to a range of individuals and roles, including marketing campaign recipients, patients, staff and healthcare provider contacts. In McKesson's disclosure notice, the company advised it had identified unauthorised access to "certain third-party applications and the exfiltration of certain data was associated with a subset of customers within our Oncology & Multispecialty and Medical-Surgical business units", but had "reasonable assurance of no ongoing unauthorized activity". -
—not statedBreached DisclosedCalifornia AG Official register
-
—not statedBreached DisclosedCalifornia AG Official register
-
10KpeopleBreached DisclosedWashington State AG Official register
- Name
- Social Security Number
- Driver's License or Washington ID Card Number
- Financial & Banking Information
- Passport Number
- Health Insurance Policy or ID Number
- Medical Information
-
L.A. Care Health Plan
CA, US · Health Plan · Hacking/IT Incident4.6KpeopleDisclosedHHS OCR breach portal Official register- Network Server
-
Hibbett Retail, Inc.
CA, US—not statedBreached DisclosedCalifornia AG Official register -
Hibbett Retail, Inc.
WA, US510peopleBreached DisclosedWashington State AG Official register- Name
- Social Security Number
- Driver's License or Washington ID Card Number
- Financial & Banking Information
- Full Date of Birth
- Student ID Number
- Military ID Number
- +3 more
-
Hamaspik (Choice and Inc.)
NY, US · Health Plan · Hacking/IT Incident8.2KpeopleDisclosedHHS OCR breach portal Official register- Network Server
-
LHC Group, Inc.
LA, US · Healthcare Provider · Hacking/IT Incident500peopleDisclosedHHS OCR breach portal Official register- Network Server
-
Partnership HealthPlan of California
CA, US · Health Plan · Unauthorized Access/Disclosure1.5KpeopleDisclosedHHS OCR breach portal Official register- Paper/Films
-
Provident Behavioral Health
IL, US · Healthcare Provider · Hacking/IT Incident25.1KpeopleDisclosedHHS OCR breach portal Official register- Network Server
-
Bimbo Bakeries USA
CA, US—not statedBreached DisclosedCalifornia AG Official register -
Catalyst Brands LLC
CA, US—not statedBreached DisclosedCalifornia AG Official register -
Elixir Medical Corporation
CA, US—not statedBreached DisclosedCalifornia AG Official register -
Bimbo Bakeries USA (Oracle)
WA, US786peopleBreached DisclosedWashington State AG Official register- Name
- Social Security Number
- Financial & Banking Information
-
Catalyst Brands LLC
WA, US4KpeopleBreached DisclosedWashington State AG Official register- Name
- Social Security Number
- Driver's License or Washington ID Card Number
- Financial & Banking Information
- Full Date of Birth
- Military ID Number
- Passport Number
- +2 more
Breach records: Have I Been Pwned (CC BY 4.0), the HHS OCR breach portal, the Washington State Attorney General and the California Attorney General breach registers (public records). Last synced 5 hours ago.