DHCA Data Breach Exposes Personal Information of Over 36,000 Individuals On October 17, 2025, Daniel H. Cook Associates, Inc. (DHCA), a benefits administration firm serving labor organizations, detected a network disruption that prompted a cybersecurity investigation. By January 12, 2026, the probe confirmed unauthorized access to sensitive data, potentially exposing the personal information of 36,663 individuals. Affected data may include names and Social Security numbers. DHCA began notifying impacted individuals via mail on January 16, 2026. Legal representatives are now investigating the incident to determine whether a class action lawsuit can be filed on behalf of those affected, citing potential harm such as privacy violations, financial losses, and time spent mitigating the breach. DHCA specializes in self-funded benefits administration, primarily working with labor unions and their members. The breach highlights ongoing risks in third-party data handling, particularly in sectors managing sensitive personal and financial information. No further details on the attack vector or responsible parties have been disclosed.