Was It Breached Secria

Recent data breaches, and what to do if you're in one

Eleven major breaches with letters going out in 2026, each checked against the company's own letter and a government filing. Eight were reported to federal health regulators.1

  1. Conduent62,224,658
  2. DentaQuest15,000,000
  3. AdaptHealth4,115,802
  4. Unlimited Technology Systems3,803,750
  5. CareCloud3,756,469
  6. TriZetto Provider Solutions3,433,965
  7. Baylor Genetics2,810,878
  8. Navia Benefit Solutions2,151,330
  9. Citizens BankTotal unconfirmed
  10. MedtronicTotal unconfirmed
  11. CarnivalTotal unconfirmed
Counts are the number of people in each company's report to the federal health breach portal.1 A listing reports a notice the company filed; it isn't a finding that the company was at fault.

Select a company for what leaked and what to do. Checked 28 October 2026 against the sources.

Eleven breaches, newest filing first

"The company says", "its letter" and "its filing" mark the company's own account. A listing reports a notice the company filed; it isn't a finding that the company was at fault.

Citizens Bank

Bank, named as filed in California
Filed 19 Oct 20262

Total unconfirmed14,371 in Texas3

What happened
The company says it found an issue on 10 September 2026 that let an unauthorized third party access some data, and has no evidence the data was examined or used maliciously.2
What leaked
Its letter lists name, Social Security number, date of birth, phone number and email address.2
What to do
Enroll in the two years of Equifax credit monitoring in the letter. With Social Security numbers involved, consider a credit freeze.2,4

AdaptHealth

Medical equipment
Filed 14 Aug 20261

4,115,802people, per HHS1

What happened
The company says an unauthorized third party got in on 5 June 2026 through a social engineering attack on a single company user account, and took data including patient information.5
What leaked
Its letter says this may include name, contact and demographic details, health plan name and policy number, and equipment orders and referring provider. It says the affected systems held no Social Security numbers, financial account or payment card data.5
What to do
Enroll in the Kroll monitoring in the letter. If your policy number was involved, tell your health insurer.5,4

Baylor Genetics

Genetic testing
Filed 14 Aug 20261

2,810,878people, per HHS1

What happened
The company says an unauthorized third party accessed parts of its network between 11 and 17 June 2026.6
What leaked
Varies by person. Its Texas filing lists names, addresses, Social Security, driver's license and other ID numbers, financial account details, medical and health insurance information, and dates of birth.3
What to do
Enroll in the IDX monitoring in the letter.6

CareCloud

Health records software
Filed 24 Jul 20261

3,756,469people, per HHS1

What happened
The company says an unauthorized third party accessed one of its cloud environments between 10 and 16 March 2026 and claimed to have taken data from it.7
What leaked
Varies by person. Its Texas filing lists names, addresses, Social Security, driver's license and other ID numbers, financial account details, medical and health insurance information, and dates of birth.3
What to do
Enroll in the IDX protection in the letter. If your letter lists your Social Security number, consider a credit freeze.7,4

Unlimited Technology Systems

Software for medical practices
Filed 21 Jul 20261

3,803,750people, per HHS1

What happened
The company says an unauthorized actor copied data between 5 and 10 October 2025.8
What leaked
Its letter lists name plus, depending on the person, insurance and claims details, medical record numbers, dates of service and diagnoses, scanned IDs and insurance cards, Social Security numbers and contact details. The company says full medical records and bank or card data were not involved.8
What to do
Activate the two years of Kroll monitoring before the deadline in your letter.8

DentaQuest

Dental and vision benefits
Filed 16 Jul 20261

15,000,000people, per HHS on 28 Oct 20261

What happened
The company says the intrusion ran from 17 to 20 May 2026, and that the information accessed was posted on the internet.9
What leaked
Its letter lists name and dental or vision health information, such as providers, diagnoses, treatments and billing. Other details vary: its Texas filing adds addresses, Social Security numbers, health insurance information and dates of birth.9,3
What to do
Start the 24 months of Kroll monitoring within 90 days of the letter's mailing date. With Social Security numbers involved, consider a credit freeze.9,4

Medtronic

Medical devices
Filed 29 Jun 202610

Total unconfirmed297,307 in Texas3

What happened
The company says an unauthorized actor accessed corporate IT systems from 13 to 19 April 2026. It says the incident did not affect any device's ability to operate safely, and it has no evidence the data was posted online.10
What leaked
Its letter lists name, contact information, date of birth, Social Security number and health-related information, held because the person uses a Medtronic device.10
What to do
Enroll in the 24 months of credit and dark web monitoring through Epiq in the letter.10

Carnival

Cruise company
Filed 27 May 202611

Total unconfirmed800,060 in Texas3

What happened
The company says it spotted unauthorized activity on an employee's account on 14 April 2026, and on 22 April found personal information had been copied.11
What leaked
The company says it varies by person: name, address, email, phone number, date of birth, and government ID numbers such as driver's license and passport numbers.12
What to do
The deadline to enroll in the TransUnion monitoring in the letter was 31 August 2026. If your passport or license number was involved, follow IdentityTheft.gov's steps for those.11,4

TriZetto Provider Solutions

Billing services for providers
Filed 6 Feb 20261

3,433,965people, per HHS1

What happened
The company says that on 2 October 2025 it found suspicious activity in a web portal its provider customers use, and that an unauthorized actor had been accessing insurance eligibility records since November 2024.14
What leaked
Its letter lists name, address, date of birth, Social Security number, health insurance member number (for some people, a Medicare number), provider and insurer names, and other demographic, health and insurance details. The company says no payment card, bank or other financial data was involved.14
What to do
Enroll in the Kroll credit monitoring in the letter. If your Medicare number was involved, call 1-800-MEDICARE (1-800-633-4227).14,4

Conduent

Back-office vendor
First filed 8 Oct 20251

62,224,658people, per HHS on 28 Oct 20261

What happened
The company says an unauthorized party was in its network from 21 October 2024 to 13 January 2025 and took files associated with its clients. Letters were still going out in 2026: California lists nine filings, the latest on 27 April 2026.15,16
What leaked
Varies by client and person. Its revised Texas filing, covering 12,784,367 Texans, lists names, addresses, Social Security and driver's license numbers, financial account details, medical and health insurance information, and dates of birth.3
What to do
Your letter names the client whose files were involved. With Social Security numbers involved, consider a credit freeze.15,4
Not on the list?We only add a breach once we've read the company's own notice and a government filing. For breaches of health data, the HHS breach portal lists reports of 500 or more people. California's attorney general posts the sample letters companies file with it.1,16

Why a company you've never heard of has your data

Some breach letters come from a company you've never dealt with. That doesn't make them fake.

The company you deal with

Your doctor, dentist, health plan or bank. It holds your details, and it may share them with vendors that handle billing, software, printing or benefits for it.

You chose this company. You may not know its vendors.

The vendor behind it

Five of the breaches above happened at vendors: Conduent, TriZetto Provider Solutions, Unlimited Technology Systems, CareCloud and Navia, which HHS lists as "business associates".1

An unfamiliar sender is common. Check the letter the same way.

What to do after a data breach

Go through these in order. Skip any step that doesn't match what your letter says leaked.

  1. Read what leaked, and check the letter is real.Look for the section called "What information was involved". Companies that write to more than 500 Californians must file a sample of the letter with California's attorney general, which posts them online.16 To contact the company, look up its number yourself.4
  2. Social Security number: freeze your credit.A freeze stops anyone opening new credit in your name. It's free at Equifax, Experian and TransUnion.4
  3. Accept the free monitoring, and note the deadline.IdentityTheft.gov says to accept free credit monitoring when a company offers it. Most of the letters we read give an enrollment deadline.4,8
  4. Check your credit reports.You can check them every week for free at AnnualCreditReport.com.4
  5. Password or login: change it.Change it on that account and anywhere you reused it, and consider turning on two-factor sign-in.4
  6. Card or bank account: call the bank.Use the number on your card or statement.4
  7. Health insurance or Medicare number: call the insurer.Report it and ask for a replacement card if needed. For Medicare, call 1-800-MEDICARE.4
  8. Get an IRS identity protection PIN.The six-digit IP PIN stops anyone else filing a tax return with your Social Security number.17
If someone already used your informationReport it at IdentityTheft.gov. It gives you checklists and sample letters for recovery.4

Questions people ask

Is a data breach letter from Kroll or IDX real?

Kroll and IDX are firms that companies hire to provide identity monitoring after a breach. DentaQuest, AdaptHealth, Unlimited Technology Systems, TriZetto Provider Solutions and Navia use Kroll; CareCloud and Baylor Genetics use IDX.9,5,8,14,13,7,6 To check yours, compare it with the sample letter on California's breach list, if the company filed one, and contact the company on a number you look up yourself.16,4

Should I freeze my credit after a data breach?

If your Social Security number was involved, IdentityTheft.gov recommends it. While a freeze is in place, nobody can open a new credit account in your name. Placing and lifting it is free.4

What should I do if my Social Security number was leaked?

Freeze your credit, check your work history in a my Social Security account, and consider locking it in E-Verify, which makes it harder for someone to use your number to get a job.4 An IRS IP PIN stops someone else filing a tax return using your Social Security number.17

How do I check if my email was in a breach?

We don't run a lookup. Have I Been Pwned, a separate search service, lets you search an email address against 1,048 breached websites and about 17.8 billion breached addresses, as of 28 October 2026.18

Sources 18
  1. Breach Portal: HIPAA cases currently under investigation, U.S. Department of Health and Human Services, Office for Civil Rights. Full list exported as CSV. Read 28 October 2026.
  2. Citizens Bank: filing and sample notice (reported 19 October 2026), California Attorney General. Read 28 October 2026.
  3. Data Security Breach Reports, Office of the Texas Attorney General. Counts are Texans only. Read 28 October 2026.
  4. What To Do if Your Information Was Lost or Stolen, or Part of a Data Breach, IdentityTheft.gov, Federal Trade Commission. Read 28 October 2026.
  5. AdaptHealth, LLC: filing and sample notice (reported 14 August 2026), California Attorney General. Read 28 October 2026.
  6. Baylor Genetics: filing and sample notice (reported 14 August 2026), California Attorney General. Read 28 October 2026.
  7. CareCloud, Inc.: filing and sample notice (reported 25 July 2026), California Attorney General. Read 28 October 2026.
  8. Unlimited Technology Systems, LLC: filing and sample notice (reported 21 July 2026), California Attorney General. Read 28 October 2026.
  9. DentaQuest LLC: filing and sample notices (reported 16 July 2026), California Attorney General. Read 28 October 2026.
  10. Medtronic Inc.: filing and sample notice (reported 29 June 2026), California Attorney General. Read 28 October 2026.
  11. Carnival Corporation: filing and sample notice (reported 27 May 2026), California Attorney General. Read 28 October 2026.
  12. Carnival Corporation Notice of Data Breach (PR Newswire release of 27 May 2026, as republished by WOWK), Carnival Corporation. Read 28 October 2026.
  13. Navia Benefit Solutions, Inc.: filing and sample notice (reported 18 March 2026), California Attorney General. Read 28 October 2026.
  14. TriZetto Provider Solutions: filing and sample notice (reported 11 February 2026), California Attorney General. Read 28 October 2026.
  15. Conduent Business Services, LLC: filing and sample notice (reported 27 April 2026, the latest of nine filings since 8 October 2025), California Attorney General. Read 28 October 2026.
  16. Search data security breaches, California Department of Justice, Office of the Attorney General. Read 28 October 2026.
  17. Get an identity protection PIN (IP PIN) (reviewed 4 August 2026), Internal Revenue Service. Read 28 October 2026.
  18. Have I Been Pwned, haveibeenpwned.com. Read 28 October 2026.

Every breach is checked against the company's own notice and a government record, and every source shows the day we read it. How we check