Knights of Columbus Data Breach Exposes Sensitive Member Information Knights of Columbus, a global Catholic fraternal benefit society offering life insurance and financial services, recently disclosed a data breach stemming from a third-party vendor, AutoAPS, a medical record retrieval services company. The breach was reported to the Massachusetts Office of Consumer Affairs and Business Regulation on August 3, 2026, though the total number of affected individuals across the U.S. remains undisclosed. AutoAPS detected suspicious network activity on December 25, 2025, and later confirmed the breach to Knights of Columbus on May 4, 2026. The compromised data included personally identifiable information (PII) such as names, addresses, dates of birth, email addresses, phone numbers, Social Security numbers, driver’s license numbers, and financial details as well as protected health information (PHI), including medical records. In response, Knights of Columbus is providing identity protection services to impacted individuals and has issued guidance on placing security freezes with major credit bureaus (Experian, TransUnion, and Equifax). The breach highlights the risks of third-party vendor vulnerabilities in handling sensitive data.