Devereux Foundation

Disclosed Jan 8, 20268 months ago86,958 affectedConfirmed

What is known

People affected	86,958 (as reported by the organization)
Disclosed	Jan 8, 2026
Discovered	Jun 23, 2026
Happened	Nov 6, 2025
Attack	Hacking
Data exposed	Names, Social Security numbers, Government IDs, Health, Insurance
Sector	Nonprofit · US
Status	Confirmed

Source	Kind
California Attorney General breach notice: Devereux Foundationoag.ca.gov · Official notice	Official notice
Notice letter filed with the Delaware DOJ: Devereux Foundationattorneygeneral.delaware.gov · Official notice	Official notice
HHS OCR breach report: Devereux Foundation (Healthcare Provider, PA)ocrportal.hhs.gov · Official notice	Official notice
Texas Attorney General data security breach report BR-0005199: Devereux Foundationoag.my.site.com · Official notice	Official notice
Vermont Attorney General breach report: Devereux Foundationago.vermont.gov · Official notice	Official notice

Where	Filed	People
HHS OCRtotal	Jan 8	501
California AGresidents of CA	Jul 23
Delaware DOJresidents of DE	Jul 23	1,294
Texas AGresidents of TX	Jul 23	5,341
Vermont AGresidents of VT	Jul 23	43

Breach	Disclosed	Attack	Sector	Status	Affected
Disclosed Feb 22, 2019Feb 22, 20197 years ago	Feb 22, 20197 years ago	Not stated	Nonprofit	Confirmed	752

History of this record

2026-09-25 · source: empty to https://ago.vermont.gov/categories/security-breach-notices · backfill source
2026-09-25 · source: empty to https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage · backfill source
2026-09-25 · attack: unknown to hacking · backfill source
2026-09-25 · disclosed: 2026-07-23 to 2026-01-08 · backfill source
2026-09-25 · data_types: [] to ["names","ssn","government-id","health","insurance"] · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 86958 · backfill source
2026-09-25 · discovered: empty to 2026-06-23 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.