Multiple Healthcare and Service Providers Hit by Data Breaches Affecting Nearly 87,000 Individuals Four organizations across the U.S. have reported significant data breaches, exposing sensitive personal and health information of nearly 87,000 individuals. The incidents, detected between 2025 and 2026, involved unauthorized access to networks and email systems, with some cases linked to cybercriminal activity. NFI North (New Hampshire/Maine) NFI North, a nonprofit providing mental health and behavioral support services, disclosed a breach affecting 49,540 individuals. Suspicious activity was detected on September 6, 2025, with an investigation concluding on July 6, 2026. Compromised data included names, addresses, birth dates, Social Security numbers, driver’s license details, financial account information, medical records, and health insurance data. The organization implemented additional safeguards following the incident. Nephrology Associates (Kansas/Missouri) A network of kidney care clinics reported a breach impacting 24,088 patients. Unauthorized access occurred between January 17 and April 9, 2026, with the intrusion detected on April 9. Exposed data included names, birth dates, Social Security numbers, driver’s license numbers, treatment details, and health insurance information. While no misuse has been confirmed, affected individuals were offered credit monitoring services. The breach appears linked to the cybercriminal group The Gentlemen, which allegedly offered the data for sale. PAMCAH-UA Local 675 Health and Welfare Fund (Hawaii) A Honolulu-based benefits provider for union plumbers and fitters disclosed unauthorized access to employee email accounts between September 23 and October 9, 2025. The breach exposed 8,319 individuals’ personal and health data, including names, birth dates, medical records, insurance details, driver’s license numbers, and Social Security numbers. Notification letters were sent to affected parties. Indico Data Solutions (Massachusetts) An AI-powered software company reported a breach affecting 4,840 individuals, confirmed on May 7, 2026. Compromised data included names, addresses, and Social Security numbers. The company responded by rotating credentials, tightening access controls, and offering credit monitoring to impacted individuals. The breaches highlight ongoing vulnerabilities in healthcare and service provider systems, with sensitive data remaining a prime target for cybercriminals.