Cardinal Services
Disclosed May 20, 20264 months ago142,323 affectedConfirmed
What is known
| People affected | 142,323 (as reported by the organization) |
|---|---|
| Disclosed | May 20, 2026 |
| Discovered | Jun 30, 2025 |
| Happened | Jun 30, 2025 |
| Attack | Not stated |
| Data exposed | Social Security numbers, Health, Insurance, Payment cards, Financial, Names |
| Sector | Retail · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Oregon DOJ breach notice: Cardinal Servicesjustice.oregon.gov · Official notice | Official notice |
| Texas Attorney General data security breach report BR-0005322: Cardinal Servicesoag.my.site.com · Official notice | Official notice |
| Indiana Attorney General 2026 data breach report: Cardinal Servicesin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | May 20 | 122 |
| Oregon DOJresidents of OR | May 27 | 128,551 |
| Texas AGresidents of TX | Sep 11 | 419 |
History of this record
- 2026-09-25 · records: 2241 to 142323 · backfill source
- 2026-09-25 · disclosed: 2026-05-27 to 2026-05-20 · backfill source
- 2026-09-25 · sector: other to retail · backfill source
- 2026-09-25 · data_types: [] to ["ssn","health","insurance","payment-card","financial","names"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 2241 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Oregon DOJ), confirmed by Oregon DOJ. Record counts are as reported. Not legal advice.