Tower Administrative Services
Disclosed Jun 23, 20263 months ago248,940 affectedConfirmed
What is known
| People affected | 248,940 (as reported by the organization) |
|---|---|
| Disclosed | Jun 23, 2026 |
| Discovered | Feb 4, 2026 |
| Happened | Feb 3, 2026 |
| Attack | Ransomware |
| Data exposed | Social Security numbers, Payment cards, Financial, Names |
| Sector | Finance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Tower Administrative Servicesoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Tower Administrative Servicesatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Tower Administrative Servicesjustice.oregon.gov · Official notice | Official notice |
| Texas Attorney General data security breach report BR-0005141: Tower Administrative Servicesoag.my.site.com · Official notice | Official notice |
| Vermont Attorney General breach report: Tower Administrative Servicesago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2026 data breach report: Tower Administrative Servicesin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Jun 23 | 2,540 |
| California AGresidents of CA | Jun 25 | |
| Washington AGresidents of WA | Jun 26 | 868 |
| Texas AGresidents of TX | Jun 26 | 25,742 |
| Vermont AGresidents of VT | Jun 26 | 78 |
| Oregon DOJresidents of OR | Jun 29 | 248,940 |
History of this record
- 2026-09-25 · disclosed: 2026-06-25 to 2026-06-23 · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/categories/security-breach-notices · backfill source
- 2026-09-25 · data_types: ["ssn","payment-card","financial"] to ["ssn","payment-card","financial","names"] · backfill source
- 2026-09-25 · data_types: [] to ["ssn","payment-card","financial"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 248940 · backfill source
- 2026-09-25 · sector: other to finance · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2026-02-04 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.