Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

Cardinal Services

Disclosed May 20, 2026142,323 affectedConfirmed

Official notice

What is known

People affected142,323 (as reported by the organization)
DisclosedMay 20, 2026
DiscoveredJun 30, 2025
HappenedJun 30, 2025
AttackNot stated
Data exposedSocial Security numbersHealthInsurancePayment cardsFinancialNames
SectorRetail · US
StatusConfirmed

Sources

Official noticejustice.oregon.gov
Oregon DOJ breach notice: Cardinal Services
Official noticeoag.my.site.com
Texas Attorney General data security breach report BR-0005322: Cardinal Services
Official noticein.gov
Indiana Attorney General 2026 data breach report: Cardinal Services

Notices filed

Residents of INMay 20
Indiana AG122 people
Residents of ORMay 27
Oregon DOJ128,551 people
Residents of TXSep 11
Texas AG419 people
History of this record
records2026-09-25
2241 to 142323by backfillSource
disclosed2026-09-25
2026-05-27 to 2026-05-20by backfillSource
sector2026-09-25
other to retailby backfillSource
data_types2026-09-25
[] to ["ssn","health","insurance","payment-card","financial","names"]by backfillSource
records_basis2026-09-25
empty to organizationby backfillSource
records2026-09-25
empty to 2241by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Oregon DOJ), confirmed by Oregon DOJ. Record counts are as reported. Not legal advice.

Everything about Cardinal Services