The Washington State Office of the Attorney General reported a data breach involving HumanGood that occurred between January 29 and January 31, 2023. The breach, characterized as unauthorized access, potentially affected the personal information of 1,411 individuals, including names, dates of birth, cell phone numbers, and the last four digits of Social Security numbers. The reporting date was May 16, 2023.

On September 27, 2017, HumanGood experienced a data breach reported by the California Department of Justice on November 3, 2017. The incident compromised the personal information of 4,844 employees, exposing sensitive details such as names, addresses, email addresses, dates of birth, wage information, and health records. The breach posed significant risks, including potential identity theft and financial fraud. In response, HumanGood notified law enforcement and offered affected individuals 12 months of credit monitoring and identity protection services to mitigate harm. The exposed data, particularly health and financial records, heightened concerns over long-term privacy and security vulnerabilities for the impacted employees. The breach underscored the critical need for robust cybersecurity measures to safeguard employee data against unauthorized access.