Thu, May 15, 2025

Oklahoma City, Oklahoma (May 15, 2025) – The law firm of Federman & Sherwood is investigating a significant data breach involving Liberty Bankers Insurance Group, including its subsidiary Capitol Life Insurance Company, which was recently reported to the Texas Office of the Attorney General. According to the public filing, the breach impacted approximately 287,109 Texans and involved the exposure of a broad range of sensitive personal information. The compromised data may include individuals' names, addresses, Social Security numbers, driver’s license...

Thu, May 15, 2025

Oklahoma City, Oklahoma (May 15, 2025) – Federman & Sherwood, a nationally recognized law firm specializing in data breach and consumer protection litigation, is investigating a data breach involving Pennsylvania Farm Bureau (“PFB”). According to a notice filed with the Maine Attorney General, PFB discovered on May 7, 2025, that certain personal information of individuals may have been accessed without authorization. The breach is linked to a suspicious event that occurred on or around December 4, 2024. While PFB became...

Thu, May 15, 2025

Oklahoma City, Oklahoma (May 15, 2025) – The law firm of Federman & Sherwood is investigating a data breach involving Resort Data Processing (“RDP”), a provider of property management software to hotels and real estate businesses. According to the notice issued by RDP, the company recently identified that an unauthorized actor injected a malicious script into a customer website. This script was used to scrape information submitted by individuals making online reservations. The exposed data includes customers’ names, payment card...

Wed, May 14, 2025

Oklahoma City, Oklahoma (May 14, 2025) – The law firm of Federman & Sherwood has initiated an investigation into a data breach involving Oxford Life Insurance Company (“Oxford”). On February 20, 2025, Oxford was alerted to suspicious activity on its IT network. The company promptly initiated its incident response protocols and engaged third-party forensic specialists to assist with the investigation. According to Oxford, the breach stemmed from a social engineering attack in which a threat actor impersonated a collections company...

Wed, May 14, 2025

Oklahoma City, Oklahoma (May 14, 2025) – Federman & Sherwood, a national law firm specializing in data breach litigation, is investigating a data security incident recently disclosed by South Bay Credit Union (“SBCU”). According to a notice issued by SBCU, on or about November 18, 2024, the credit union identified suspicious activity involving one of its employee’s email accounts. Following this discovery, SBCU launched an internal investigation with the assistance of third-party cybersecurity specialists. It was later determined that an...

Tue, May 13, 2025

Oklahoma City, Oklahoma (May 13, 2025) – On January 4, 2025, Metropolitan State University of Denver (MSU Denver) became aware of a security incident involving unauthorized access to a limited number of university email accounts. Upon discovery, the university promptly launched an investigation and took immediate steps to contain and remediate the issue. These actions included resetting affected passwords and engaging leading data security and privacy professionals to support the response. MSU Denver has reported the incident to the appropriate...

Tue, May 13, 2025

Oklahoma City, Oklahoma (May 13, 2025) – Kittrich Corporation recently identified unauthorized activity within its network. Following a comprehensive investigation, it was determined that an unauthorized third party had accessed and exfiltrated certain files from the company’s internal systems. The incident was promptly reported to the FBI, and Kittrich Corporation continues to cooperate fully with law enforcement authorities. In response, the company has implemented a series of immediate and proactive security measures, including enhanced endpoint detection, isolation of affected systems,...

Tue, May 13, 2025

Oklahoma City, Oklahoma (May 13, 2025) – On December 7, 2024, Long Beach Convention and Entertainment Center (the “Center”) detected suspicious activity within portions of its network. In response, immediate steps were taken to block unauthorized activity and temporarily take certain systems offline as a precaution. Law enforcement authorities were notified, and a comprehensive investigation was launched with the assistance of independent cybersecurity experts. The investigation later confirmed that certain files were accessed and exfiltrated during the breach. Federman &...

Tue, May 13, 2025

Oklahoma City, Oklahoma (May 13, 2025) – On or around February 20, 2025, the Roman Catholic Bishop of San Diego (“RCBSD”) identified a privacy incident involving the unintended disclosure of sensitive information. During the incident, an internal spreadsheet was inadvertently sent by the Human Resources Department to an incorrect email address as a result of a typographical error.   Although efforts have been made to contact the unintended recipient, RCBSD has not received confirmation that the spreadsheet has been deleted...

Tue, May 13, 2025

Oklahoma City, Oklahoma (May 13, 2025) – Between January 27 and February 1, 2025, Caltrol experienced a cybersecurity incident involving unauthorized access to its internal systems. During this time, an unknown threat actor was able to infiltrate the company’s network and exfiltrate certain data without authorization. The breach was identified on February 1, 2025, at which point Caltrol promptly took steps to contain the incident, secure its IT environment, and launch a thorough investigation. External cybersecurity experts were engaged to...

Mon, May 12, 2025

Oklahoma City, Oklahoma (May 12, 2025) – On March 3, 2025, Monongalia Health System, Inc. (Mon Health) identified a cybersecurity incident that compromised the personal and medical data of at least 4,895 individuals. The breach stemmed from a targeted phishing scheme that led to unauthorized access to several employee email accounts. As a result, cybercriminals were able to view documents containing confidential patient and administrative information. Mon Health officially reported the incident to the U.S. Department of Health and Human...

Mon, May 12, 2025

Oklahoma City, Oklahoma (May 12, 2025) – On or around March 18, 2025, SogoTrade became aware that a phishing email containing malicious software led to unauthorized access to four employee email accounts. The unauthorized access is believed to have occurred between approximately May 8, 2024, and May 22, 2024. A comprehensive investigation conducted by an independent third-party cybersecurity firm confirmed the details of the incident. Following the discovery, Sogo Trade conducted a review of its phishing response procedures and implemented...

Mon, May 12, 2025

Oklahoma City, Oklahoma (May 12, 2025) – Kiernan Trebach LLP notified customers of a cybersecurity incident by providing breach notification letters to an undisclosed number of victims after becoming aware of suspicious activity in their environment. According to the notice filed with the Attorney General of Maine, the breach occurred September 24, 2024, but was not discovered until May 6, 2025.  Kiernan Trebach dated the notification letters May 7, 2025, via the notification filing with Maine Attorney General. Federman &...

Mon, May 12, 2025

Oklahoma City, Oklahoma (May 12, 2025) – On March 17, 2025, WaterStreet identified suspicious activity within its IT environment. In response, the company immediately initiated an investigation to determine the nature and scope of the incident and to securely restore affected systems. The investigation revealed that an unauthorized individual accessed certain files on that same date. A thorough review of the accessed files was conducted to determine the type of information involved and the individuals affected. This review confirmed that...

Mon, May 12, 2025

Oklahoma City, Oklahoma (May 12, 2025) – On October 23, 2024, Starkville detected unauthorized activity within its computer network (the “Incident”). In response, the organization promptly disconnected network access and engaged a specialized third-party incident response firm to assist in securing the environment and conducting a detailed forensic investigation. This investigation, completed on December 11, 2024, confirmed that an unauthorized individual had gained limited access to information stored within Starkville’s systems.   Following the investigation, Starkville retained a third-party data...

Mon, May 12, 2025

Oklahoma City, Oklahoma (May 12, 2025) – On April 18, 2025, an investigation concluded that an unauthorized individual accessed files within the Nixon, Inc. systems containing personal information. During their presence in the IT environment, the unauthorized party may have accessed files that included certain personal details. Nixon, Inc. was first alerted to unusual activity within its information technology environment on December 18, 2024. In response, it promptly launched an internal investigation, implemented measures to secure its systems, and notified...

Tue, May 06, 2025

Oklahoma City, Oklahoma (May 6, 2025) – The Tailored Closet of Southern Maine (TCSM) recently identified an incident involving unauthorized access to its payroll system. Upon discovery, TCSM took immediate action to secure the system and launched a thorough investigation to determine the nature and scope of the incident. The investigation confirmed that an unauthorized actor accessed the payroll system on April 23, 2025. During the review, TCSM identified a file that was viewed by the unauthorized actor. On April...

Tue, May 06, 2025

Oklahoma City, Oklahoma (May 6, 2025) – On October 16, 2024, GeoLogics identified that certain personal information may have been accessed or acquired from its network during a limited timeframe between December 21 and December 23, 2023. Upon discovery, GeoLogics immediately launched a comprehensive investigation and took steps to assess and mitigate the situation. As part of its response, GeoLogics undertook a detailed review of the data set to determine whether any sensitive personal information was involved and to identify...

Tue, May 06, 2025

Oklahoma City, Oklahoma (May 6, 2025) – On April 30, 2025, Family Christian Health Center reported a cybersecurity incident to the U.S. Department of Health and Human Services. Reports indicate that the ransomware group known as RansomHub claimed responsibility for the breach, alleging they had obtained 118 GB of confidential data and threatened to release it on the dark web within a week. The breach impacted an estimated 12,500 individuals across the United States. Although the exact nature of the...

Fri, May 02, 2025

Oklahoma City, Oklahoma (May 2, 2025) – OrthoMinds, LLC, a provider of orthodontic software based in Alpharetta, Georgia, has reported a data breach that may have affected information tied to services offered to its clients. In November 2024, the company identified suspicious activity within its network environment. A subsequent investigation revealed that certain databases may have been subject to unauthorized access between November 17 and November 27, 2024. Through its review of the impacted files and directories, OrthoMinds confirmed that...

Fri, May 02, 2025

Oklahoma City, Oklahoma (May 2, 2025) – 301 Scrubs Investors, LLC, doing business as Scrubs & Beyond LLC and Kindthread (Kindthread), is notifying individuals of a recent data security incident that may have involved personal information. On June 7, 2024, Kindthread detected unauthorized activity within its computer network. In response, the company immediately launched an investigation with the assistance of third-party forensic specialists to assess the nature and scope of the incident. The investigation confirmed that an unauthorized party had...

Fri, May 02, 2025

Oklahoma City, Oklahoma (May 2, 2025) – Brainard Surgery Center LLC (Brainard) recently disclosed a data breach involving the potential compromise of sensitive personally identifiable information and protected health information under its care. According to the breach notification, Brainard detected suspicious activity within its computer network on February 23, 2025, prompting the company to initiate an investigation into the nature and scope of the incident. As a result of this investigation, Brainard confirmed on January 30, 2025, that an unauthorized...

Fri, May 02, 2025

Oklahoma City, Oklahoma (May 2, 2025) – Lincoln Financial was recently notified that Kelly Benefits—a third-party provider of benefits administration, payroll solutions, and broker and consulting services—was the target of a cybersecurity incident. Employers partner with Kelly Benefits to manage payroll and/or group benefits enrollment, which may include group insurance products offered by Lincoln Financial or other insurance providers. Kelly Benefits determined that between December 12 and December 17, 2024, unauthorized access occurred on their servers, and certain files were...

Fri, May 02, 2025

Oklahoma City, Oklahoma (May 2, 2025) – On or around December 10, 2024, Good Neighbors Federal Credit Union (GNFCU) experienced unauthorized access to its network. Upon discovering the incident, GNFCU immediately launched a thorough investigation. The credit union has been working closely with external cybersecurity experts who specialize in managing incidents of this nature. Following an in-depth forensic investigation and a comprehensive review of relevant documents, GNFCU determined on April 4, 2025, that certain personal information stored on its network...

Fri, May 02, 2025

Oklahoma City, Oklahoma (May 2, 2025) – Divaris Consolidated Investments, Inc. (Divaris) detected unauthorized access to their network on May 31, 2024. Upon becoming aware of the issue, the organization promptly secured its systems and launched a comprehensive investigation. In collaboration with external cybersecurity experts who specialize in managing such incidents, the organization conducted an in-depth forensic analysis and manual review of documents. This investigation revealed on April 4, 2025, that an unauthorized party may have accessed or acquired certain...

Thu, May 01, 2025

Oklahoma City, Oklahoma (May 1, 2025) – The law firm of Federman & Sherwood has initiated an investigation into potential securities claims on behalf of shareholders of Backblaze Inc. (NASDAW: BLZE) resulting from allegations that Backblaze Inc. may have issued materially misleading business information to the investing public and/or engaged in other unlawful business practices. On April 24, 2025, Investing.com issued an article entitled, "Backblaze stock plunges amid Morpheus Research report." This article stated that Backblaze "saw its shares plummet"...

Thu, May 01, 2025

Oklahoma City, Oklahoma (May 1, 2025) – Thompson Coburn filed a supplemental notice of data breach with the Maine Attorney General on April 30, 2025.  The firm previously identified suspicious activity within its network on May 29, 2024. The firm immediately launched an investigation, enlisting the help of independent forensic experts to assess the nature and scope of the incident. The investigation concluded that an unauthorized party accessed or acquired certain personal and sensitive data stored within Thompson Coburn’s systems...

Thu, May 01, 2025

Oklahoma City, Oklahoma (May 1, 2025) – Between December 24 and December 27, 2024, an unauthorized individual accessed and obtained files from systems located at a limited number of iHeartMedia’s local stations. Upon discovering the incident, iHeartMedia promptly activated its incident response protocols, took immediate steps to contain the breach, and initiated a thorough investigation. The company also engaged a reputable cybersecurity firm with experience in similar matters and notified law enforcement authorities. Following a detailed review of the affected...

Thu, May 01, 2025

Oklahoma City, Oklahoma (May 1, 2025) – On November 13, 2024, Conrey Insurance Brokers detected unusual activity within its network and promptly launched an investigation. The investigation revealed that an unauthorized party had accessed a portion of the network between November 12 and November 13, 2024. As a result, Conrey Insurance Brokers conducted a thorough review to determine the type of information that may have been involved. This review was completed on April 10, 2025. Federman & Sherwood is conducting...

Thu, May 01, 2025

Oklahoma City, Oklahoma (May 1, 2025) – Around February 19, 2025, Hopkinson & Abbondanza, PA (H&A) became aware of potential unauthorized access to an employee's email account. Upon discovery, the company promptly secured its email system and engaged a third-party forensic firm to investigate the incident. Following a comprehensive investigation, H&A determined on April 9, 2025, that a limited amount of information maintained in the normal course of business may have been accessed by an unauthorized third party in connection...