Robinson Nursery Data Breach Exposes Sensitive Personal and Health Information Robinson Nursery Inc, a family-owned wholesale nursery based in Amity, Oregon, suffered a data breach between February 22 and 23, 2026, when an unauthorized third party accessed and exfiltrated files from its network. The company detected the incident on February 23, 2026, and a subsequent forensic investigation, completed on June 10, 2026, confirmed that the stolen data included sensitive personally identifiable information (PII) and protected health information (PHI). The exposed data may have included: - Full names - Dates of birth - Social Security numbers - Passport and driver’s license numbers - Tax identification and financial account information - Health insurance and medical treatment details On March 11, 2026, the ransomware group Akira claimed responsibility for the attack, posting on the Tor network that they had obtained employee files, financial records, client and partner data, and other confidential documents. Robinson Nursery began notifying affected individuals on July 10, 2026, offering guidance on mitigating potential risks. The law firm Shamis & Gentile P.A. is investigating the breach and potential legal claims for those impacted. The incident highlights the growing threat of ransomware attacks targeting businesses with sensitive customer and employee data.