Indico Data Solutions
Disclosed Aug 7, 20267 weeks ago4,840 affectedConfirmed
Data workflow vendor Indico says customer documents with SSNs were exposed
Indico Data Solutions, which processes documents for companies, notified people that unauthorized access to its online repositories in May 2026 exposed documents containing names, SSNs and financial account numbers supplied by its customers.
What is known
| People affected | 4,840 (as reported to HHS) |
|---|---|
| Disclosed | Aug 7, 2026 |
| Discovered | May 7, 2026 |
| Happened | May 5, 2026 |
| Attack | Hacking |
| Data exposed | Names, Health, Social Security numbers, Financial, Government IDs, Insurance, Payment cards, Dates of birth, Addresses |
| Sector | Data brokers · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Indico Data Solutionsoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report: Indico Data Solutions (Business Associate, MA)ocrportal.hhs.gov · Official notice | Official notice |
| California AG breach report: Indico Data Solutionsoag.ca.gov · Regulator | Regulator |
| Indico sample notification letteroag.ca.gov · Regulator | Regulator |
| Texas Attorney General data security breach report BR-0005289: Indico Data Solutionsoag.my.site.com · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS OCRtotal | Aug 7 | 4,840 |
| California AGresidents of CA | Aug 27 | |
| Researchtotal | Aug 27 | |
| Texas AGresidents of TX | Sep 1 | 2,128 |
History of this record
- 2026-09-25 · data_types: ["names","health","ssn","financial"] to ["names","health","ssn","financial","government-id","insurance","payment-card","dob","addresses"] · backfill source
- 2026-09-25 · sector: tech to data · seed source
- 2026-09-25 · data_types: ["names","health"] to ["names","health","ssn","financial"] · seed source
- 2026-09-25 · discovered: empty to 2026-05-07 · seed source
- 2026-09-25 · summary: empty to Indico Data Solutions, which processes documents for companies, notified people that unauthorized access to its online repositories in May 2026 exposed documents containing names, SSNs and financial account numbers supplied by its customers · seed source
- 2026-09-25 · title: empty to Data workflow vendor Indico says customer documents with SSNs were exposed · seed source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 4840 · backfill source
- 2026-09-25 · disclosed: 2026-08-27 to 2026-08-07 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.