Cardinal Services Data Breach Exposes Sensitive Information of Over 142,000 Individuals Shamis & Gentile P.A., a class action law firm specializing in data breach cases, is investigating a cybersecurity incident involving Cardinal Services, Inc., an HR outsourcing and employment services company based in Coos Bay, Oregon. The breach, discovered by Cardinal on May 12, 2026, occurred between June 25 and August 8, 2025, when an unauthorized party accessed sensitive consumer data. The RHYSIDA ransomware group claimed responsibility, threatening to publish stolen information on the dark web after posting details on July 15, 2025. Affected data includes Social Security numbers, financial account codes, credit/debit card details, and government ID numbers, impacting 142,323 individuals across the U.S., including residents of Maine and Vermont. Cardinal began notifying affected consumers in writing on May 20, 2026. Founded in 1984, Cardinal provides staffing, payroll processing, HR administration, and risk compliance services to businesses in the Pacific Northwest. The incident highlights ongoing risks associated with third-party data handling and ransomware attacks.

Cardinal Services Data Breach Exposes Sensitive Personal Information New York and Chicago-based law firm Wolf Haldenstein Adler Freeman & Herz LLP is investigating a data breach affecting individuals associated with Cardinal Services, Cardinal Employer Organization, and Preferred Employer Solutions, headquartered in Coos Bay, Oregon. The breach, which occurred in June 2025, may have resulted in the theft of sensitive personal data, including names, financial account information, and Social Security numbers. Cardinal has begun notifying impacted individuals, warning that compromised data may be circulating on the dark web. Those who received breach notifications and observed suspicious activity such as unauthorized transactions or identity theft are advised to assess potential exposure. Wolf Haldenstein, a national consumer rights firm with a history of handling complex litigation, is reviewing claims from affected parties. The firm has offices in New York, Chicago, Nashville, and San Diego and specializes in data breach and consumer protection cases. Individuals seeking legal guidance can contact the firm via phone or email. The breach underscores ongoing risks to personal data security, particularly for organizations handling financial and identification records. Further details on the scope and response remain under investigation.