IMA Diligence Services
Disclosed May 29, 20263 months ago525,306 affectedConfirmed
What is known
| People affected | 525,306 (as reported by the organization) |
|---|---|
| Disclosed | May 29, 2026 |
| Discovered | Dec 16, 2025 |
| Happened | Dec 8, 2025 |
| Attack | Ransomware |
| Data exposed | Names, Social Security numbers, Government IDs, Health, Insurance, Payment cards, Financial, Addresses |
| Sector | Other · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: IMA Diligence Servicesoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: IMA Diligence Servicesatg.wa.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: IMA Diligence Servicesattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: IMA Diligence Servicesjustice.oregon.gov · Official notice | Official notice |
| Texas Attorney General data security breach report BR-0005078: IMA Diligence Servicesoag.my.site.com · Official notice | Official notice |
| Vermont Attorney General breach report: IMA Diligence Servicesago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2026 data breach report: IMA Diligence Servicesin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | May 29 | |
| Washington AGresidents of WA | May 29 | 1,977 |
| Delaware DOJresidents of DE | May 29 | 3,445 |
| Oregon DOJresidents of OR | May 29 | 525,306 |
| Vermont AGresidents of VT | May 29 | 40 |
| Indiana AGresidents of IN | May 29 | 3,392 |
| Texas AGresidents of TX | Jun 1 | 70,928 |
History of this record
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-7_2026.pdf · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/categories/security-breach-notices · backfill source
- 2026-09-25 · data_types: ["names","ssn","government-id","health","insurance"] to ["names","ssn","government-id","health","insurance","payment-card","financial","addresses"] · backfill source
- 2026-09-25 · data_types: [] to ["names","ssn","government-id","health","insurance"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 525306 · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2025-12-16 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.