Gladney Centre for Adoption, a non-profit adoption agency, experienced a significant data breach due to an unencrypted, non-password-protected database. The breach exposed sensitive information about children, parents, employees, and other individuals, including names, phone numbers, postal addresses, and data on adoption statuses. The database contained over 1.1 million records and was discovered by a security researcher. Although there is no evidence that the data was accessed by malicious actors before being secured, the potential for phishing attacks, identity theft, wire fraud, and ransomware is high.

Gladney Center Reports Dual Data Breaches Impacting Sensitive Personal and Health Information In February 2026, the Gladney Center disclosed a pair of data breaches that compromised sensitive personal and protected health information (PHI) of individuals under its care. The incidents, which occurred in February and April 2025, targeted a section of the organization’s network, exposing data stored in email accounts to unauthorized access. The first breach was detected in February 2025, prompting an internal investigation. During this review, Gladney Center uncovered a second, unrelated incident in April 2025, linked to a third-party system vulnerability affecting the same network segment. The breaches potentially exposed a range of sensitive data, including: - Full names - Social Security numbers - Dates of birth - Driver’s license or state ID numbers - Email addresses and passwords - Passport numbers - Usernames and passwords - Medical information On February 3, 2026, Gladney Center began notifying affected individuals via mail, detailing the specific types of compromised data and offering complimentary credit monitoring services. The breach notice was filed with the Attorney General of New Hampshire, where the incident was made public. The full scope of impacted individuals and the exact timeline of unauthorized access remain under review.