WA Data Breach Notifications

Pyramid Global Hospitality Data Breach Notification

Pyramid Global Hospitality is notifying current and former employees of a data breach discovered on September 30, 2025, impacting personal information. The company is offering credit monitoring and identity restoration services and has notified relevant state regulators and federal law enforcement.

Data Breach Notification for CommonSpirit Health and Pinnacle Holdings

Washington State's Office of the Attorney General has been notified of a data breach impacting CommonSpirit Health, reported by vendor Northgauge Healthcare Advisors. The breach occurred at Pinnacle Holdings, a vendor to Northgauge, and may have exposed personal information of Washington residents.

Lakeside Pediatrics Data Breach Notification

Lakeside Pediatric & Adolescent Medicine PLLC is notifying 1314 Washingtonians of a data security incident that occurred on or about November 1, 2024. An unauthorized party accessed their systems, potentially exposing personal information. The company is offering credit monitoring services.

Drivestream Data Breach Notification

Drivestream, Inc. is notifying Washington residents of a data breach that occurred between December 4-9, 2024. An unauthorized actor accessed systems and potentially exfiltrated sensitive personal information, affecting 505 Washington residents. Drivestream is offering credit monitoring services.

New American Funding Data Breach Notification

New American Funding has notified the Washington Attorney General's office of a data breach affecting 699 state residents. The incident, which occurred at a service provider, may have exposed personal information including names, addresses, and Social Security numbers. Affected individuals are being notified and offered credit monitoring services.

Brown Advisory Security Incident and Data Breach Notification

Brown Advisory reported a security incident on January 21, 2026, involving unauthorized access to certain systems by a threat actor. Personal data, including names, contact information, and sensitive identification details, may have been accessed. The company is offering 24 months of free identity protection services from Experian.

Insightin Health Data Breach Notification

Insightin Health is notifying Washington residents and regulators of a data breach affecting 11,740 individuals due to a cyberattack exploiting a zero-day vulnerability. The breach, which occurred in September 2025, potentially exposed names, dates of birth, medical, and health insurance information. Insightin is offering 12 months of free credit monitoring services.

JATC Data Breach Notification

The UA Sprinkler Fitters Local 669 Joint Apprenticeship and Training Committee (JATC) has issued a data breach notification following suspicious activity detected on May 23, 2024. The breach potentially exposed names, Social Security numbers, driver's license numbers, and medical information of 518 Washington residents.

Phia Group Data Security Incident Notification

The Phia Group has notified the Washington Attorney General's office of a data security incident affecting approximately 2,802 residents. Personal information including clinical data, DOB, and SSN may have been compromised between July 8-9, 2024.

Fried Frank Data Breach Notice

Fried Frank, Harris, Shriver & Jacobson LLP is issuing a data breach notice to affected individuals following a cybersecurity incident discovered on October 27, 2025. The incident involved unauthorized access to a user account, leading to the potential exposure of personal information. The firm is offering two years of free credit and identity monitoring services.