The Vermont Office of the Attorney General reported a data breach involving the Mississippi Children’s Home Society, CARES Center, Mississippi Children’s Home Services dba Canopy Children’s Solutions on April 11, 2024. Specific details about the method of breach, date of occurrence, number of individuals affected, and types of information compromised are currently unknown.

The Washington State Office of the Attorney General disclosed a ransomware cyberattack targeting Mississippi Children's Home Services, Inc., first detected on April 4, 2023, and reported publicly on April 11, 2024. The breach compromised sensitive personal data of 2,477 Washington residents, including names, Social Security numbers, driver’s license numbers, financial records, and medical information. The attack’s scope suggests a severe exposure of highly confidential data, posing risks of identity theft, financial fraud, and potential misuse of medical records. Given the nature of the compromised information—spanning financial, governmental (SSN, driver’s licenses), and health data—the incident aligns with high-impact cyber threats that undermine trust in the organization’s ability to safeguard vulnerable populations, particularly children and families reliant on its services. The use of ransomware indicates the attackers likely encrypted critical systems, exacerbating operational disruptions while demanding payment for data restoration. The prolonged gap between breach detection and public disclosure (nearly a year) further raises concerns about transparency and incident response efficacy. The breach’s fallout may extend to regulatory penalties, reputational damage, and long-term financial liabilities for affected individuals.