Loading story…
Rumpke Waste & Recycling agreed to a $750,000 class-action settlement tied to a cyberattack that resulted in the theft of over 3TB of data and impacted nearly 17,000 current and former employees, according to multiple reports. The incident was publicly disclosed on January 13, 2026, and is described as having been detected around October 2024; no threat actor attribution was provided in the reporting. Exposed data is described as including highly sensitive personal identifiers such as Social Security numbers, and the settlement includes reimbursement and credit monitoring for affected individuals, while the company denies wrongdoing.
The other items in the set describe separate security stories and should not be conflated with the Rumpke matter. PcComponentes denied that attackers breached its internal systems or stole a 16M-record customer database, but acknowledged evidence of a credential stuffing campaign against customer accounts. Separately, Microsoft’s January security update addressed 114 vulnerabilities including three reported zero-days—CVE-2026-20805, CVE-2026-21265, and CVE-2023-31096—with CVE-2026-20805 described as actively exploited; this is a patch/vulnerability disclosure topic rather than a confirmed Microsoft “data breach.”
See attribution, scope, and your downstream exposure.
3 events from the most recent confirmed update back to the earliest known activity.
By 2026-01-21, reporting said Rumpke had agreed to a preliminary $750,000 settlement related to the breach. The settlement includes cash payments or reimbursements and credit monitoring for affected individuals, while the company denied wrongdoing.
On 2026-01-13, Rumpke Waste & Recycling publicly disclosed a data breach tied to the earlier cyberattack. The company said the incident affected nearly 17,000 current and former employees.
Around October 2024, attackers reportedly gained unauthorized access to Rumpke Waste & Recycling systems and stole more than 3 terabytes of data. The compromised data included sensitive employee information, including Social Security numbers.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
3 references tracked. Mallory keeps watching after this page renders.
upguard.com
Open sourceupguard.com
Open sourceupguard.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
**Norton Healthcare** agreed to pay **$11 million** to settle a class-action lawsuit tied to a 2023 **ALPHV/BlackCat** ransomware-related data theft that reportedly involved **4.7 TB** of stolen data and impacted nearly **2.5 million** people. The preliminary settlement provides for reimbursement claims (up to **$2,500** for unreimbursed expenses), compensation for time spent responding to the incident (up to **$80**), and **three years of medical identity monitoring**, pending final court approval. Separately, Ohio-based **Kettering Health** began notifying current and former patients and affiliates about a **May 2025** ransomware and data theft incident claimed by the **Interlock** cybercrime group. Reporting indicates Interlock publicly listed Kettering Health on its leak site and claimed roughly **941–950 GB** of data, and Kettering previously warned patients about **scam calls** from fraudsters impersonating medical bill collectors seeking credit card payments—activity consistent with post-breach social engineering and fraud attempts.
Jun 29, 2026
Multiple healthcare-related organizations disclosed **separate** incidents involving exposure or theft of patient data. Delta Medical Systems reported unauthorized access to its email environment on July 15, 2025, with potentially exposed data including names, dates of birth, Social Security numbers, driver’s license information, bank details, insurance information, and medical information. A separate HIPAA Journal report described additional incidents at Cedar Valley Services, Community Nurse, and Health Dimensions Group, including a likely **Qilin ransomware** intrusion at Cedar Valley Services and a vendor-linked compromise affecting Community Nurse through *Doctor Alliance*, where files may have been accessed between October 31 and November 17, 2025. In a different but related healthcare privacy matter, a judge approved a **$5 million settlement** in litigation against Geisinger Health and *Nuance Communications* over the theft of medical records affecting roughly **1.3 million patients** by a former Nuance employee. The stolen records reportedly included names, birthdates, addresses, medical record numbers, treatment details, and insurance information. While all three reports concern healthcare data exposure, they describe **distinct incidents** rather than one unified breach event, spanning direct compromises, third-party/vendor exposure, suspected ransomware activity, and post-incident legal resolution.
Jul 12, 2026
Several healthcare organizations are resolving class-action litigation tied to alleged exposure of sensitive patient data, with settlements emphasizing cost avoidance rather than admissions of wrongdoing. **Kaiser Permanente** agreed to a **$46 million** settlement over claims that patient interactions with certain Kaiser websites and digital tools resulted in personal health information being transmitted to third parties (including **Google, Microsoft Bing, Twitter/X, and Adobe**) via online tracking/advertising technologies; the allegations focus on web/digital activity rather than Kaiser’s core electronic medical record systems, and the proposed class period spans **2017–2024**. Separately, two healthcare entities reached settlements following **network intrusions** that allegedly exposed protected health information and other sensitive identifiers. **Mystic Valley Elder Services** agreed to pay **$520,000** to settle claims stemming from an **April 2024** incident in which attackers accessed its network and potentially obtained data including SSNs, financial/payment data, credentials, and medical/insurance information affecting **~89,600** people; plaintiffs also alleged delayed detection and notification. **Consulting Radiologists Ltd.** received approval for a **$2.2 million** settlement after a 2024 intrusion affecting up to **583,824** individuals, with allegations including inadequate security controls and delayed breach notification; the organization reported that some impacted records included medical/insurance data and SSNs (for a subset of individuals).
Jun 29, 2026