Kids Co. Data Breach Exposes Sensitive Personal Information, Including Social Security Numbers On July 2, 2026, Evergreen Children’s Association (operating as Kids Co.) disclosed a data breach that may have compromised sensitive personal information, including Social Security numbers, of individuals associated with its programs. The organization, which provides early learning, after-school, summer camp, and day camp services across multiple locations in the Seattle area, reported the incident but has not yet released details on the breach’s scope or cause. Affected individuals may have received notification letters, though specifics about the number of impacted parties remain unclear. The breach was reported to the Massachusetts Office of Consumer Affairs and Business Regulation, with potential claims including loss of privacy, time spent mitigating the incident, and out-of-pocket costs. Legal professionals are investigating the possibility of a class action lawsuit on behalf of those affected, seeking compensation for damages. Attorneys working with ClassAction.org are actively gathering information from impacted individuals to determine the viability of such a case. Participation in the investigation is voluntary, with no upfront costs for those who choose to engage. As of now, no further technical details about the breach such as the attack vector or timeline have been made public. Additional updates may follow as the investigation progresses.

Three Healthcare Providers Report Data Breaches Impacting Patient Information Three U.S. healthcare organizations the Center for Advanced Eye Care, Southwest C.A.R.E Center, and Evergreen Healthcare Group have disclosed cybersecurity incidents involving unauthorized access to patient data. ### Center for Advanced Eye Care (Pennsylvania/Delaware) On December 16, 2025, the Center for Advanced Eye Care detected suspicious activity in its legacy systems. A forensic investigation confirmed that an unauthorized third party accessed and exfiltrated protected health information (PHI). While the exact data types remain undisclosed, affected individuals have been offered credit monitoring and identity theft protection services after a hacker claimed to be selling the stolen data. The breach has not yet been listed on the HHS’ Office for Civil Rights (OCR) breach portal, leaving the total number of impacted patients unknown. ### Southwest C.A.R.E Center (New Mexico) Southwest C.A.R.E Center, a New Mexico-based nonprofit, reported a cybersecurity incident detected on June 3, 2025. A forensic investigation revealed that patient data including names, personal information, and PHI was exposed and potentially stolen. Though no misuse has been confirmed, the Medusa ransomware group claimed responsibility, alleging the theft of 143 GB of data. The organization has strengthened its security measures and provided 12 months of credit monitoring to affected individuals. The breach is not yet reflected in the OCR portal. ### Evergreen Healthcare Group (Washington) Evergreen Healthcare Group, operating as Couve Healthcare Consulting, identified unauthorized activity in its cloud-based healthcare platform on December 3, 2025. A forensic review completed on February 24, 2026, confirmed that names, dates of birth, Social Security numbers, and medical information were accessed or exfiltrated. The platform has since been secured, and additional safeguards have been implemented. Affected individuals have been offered credit monitoring and identity theft restoration services. The breach remains unlisted on the OCR portal. All three incidents highlight ongoing cybersecurity risks in the healthcare sector, with investigations still determining the full scope of exposure.

EvergreenHealth, King County Public Hospital District No. 2 fell victim to the data breach incident after third-party company Eye Care Leaders, which provides the myCare Integrity electronic medical record (EMR) platform to it suffered a data security incident. An unauthorized party accessed myCare Integrity data around December 4, 2021, and deleted some databases and system configuration files containing the information of 20,533 individuals. The compromised information may include patient names, dates of birth, medical record numbers, and information regarding care received at EvergreenHealth Eye Care Clinic. EvergreenHealth notified and appolozised the impacted individuals about the breach.