Progress Foundation Data Breach Exposes Sensitive Employee Information Shamis & Gentile P.A., a class action law firm specializing in data breach cases, is investigating a security incident involving Progress Foundation, a San Francisco-based nonprofit providing mental health rehabilitation and recovery services since 1969. On February 2, 2026, Progress Foundation suffered a data breach when employees’ W2 forms were accidentally disclosed to an unauthorized party. The organization detected and investigated the incident before notifying the California Attorney General’s office on February 12, 2026, and the Vermont Attorney General’s office on February 13, 2026. The exact number of affected individuals has not been disclosed. The exposed data includes names and Social Security numbers, putting those impacted at risk of identity theft and financial fraud. Legal representatives are reviewing potential compensation claims for affected individuals.