Goldenberg Schneider, LPA

DriveWealth, LLC Data Breach Investigation

2026-10-14T19:15:42Z

DriveWealth, LLC (“DriveWealth”) is a New York City, New York-based company providing brokerage and investment solutions. It recently experienced a data security incident, potentially exposing the sensitive information belonging to individuals whose broker dealer, registered investment advisor, or other financial institution shared their information with DriveWealth. In Texas alone, over 2.5 million people were affected.

Between September 4, 2026 and September 5, 2026, an unauthorized party accessed DriveWealth’s network. DriveWealth notes that this breach may have impacted individuals’ Personally Identifiable Information (“PII”). The Office of the Texas Attorney General’s data breach portal lists names, Social Security number information, and financial information as PII potentially compromised by the DriveWealth data security incident.

If you receive a breach notice letter from DriveWealth, you can contact Goldenberg Schneider, LPA for additional information about your legal rights by calling 513-982-1569, sending an email to info@gs-legal.com or completing the “Contact Us” form to the right.

World Acceptance Corporation Data Breach Investigation

2026-10-14T13:49:37Z

World Acceptance Corporation (“WAC”) is one of the largest small-loan consumer finance companies in the United States. WAC recently experienced a data security incident, potentially compromising the information of over 230,000 people.

On or around August 24, 2026, WAC discovered suspicious activity within its network environment. WAC consequently launched an investigation, and the investigation revealed that some individuals’ names, Social Security numbers, and driver’s license information might have been subject to unauthorized access/acquisition on or around August 24, 2026.

If you receive a breach notice letter from World Acceptance Corporation, you can contact Goldenberg Schneider, LPA for additional information about your legal rights by calling 513-982-1569, sending an email to info@gs-legal.com or completing the “Contact Us” form to the right.

Astrana Health Data Breach Investigation

2026-10-06T05:10:30Z

Astrana Health, Inc. is a publicly traded healthcare company combining a management services organization, independent physician associations, and accountable care organizations. Its subsidiary—Astrana Health Management Inc. —recently experienced a data security incident, potentially exposing sensitive information belonging to Astrana Health patients, employees, and providers. On September 23, 2026, Astrana Health submitted a Form 8-K to the U.S. Securities and Exchange Commission. The form describes its subsidiary recently learning of unusual activity within its network environment. Astrana Health recounts threat actors using social engineering to gain access to said systems. Though an investigation of the data breach is ongoing, the company “believes that certain private and/or confidential information maintained on the Company’s servers has been accessed and/or acquired without authorization.” If you are an Astrana Health patient, employee, or provider and believe your information was impacted by the breach, you can contact Goldenberg Schneider, LPA for additional information about your legal rights by calling [nap_phone id="LOCAL-CT-NUMBER-2"], sending an email to info@gs-legal.com or completing the “Contact Us” form to the right.

Clorox Puerto Rico Mistolin® and Lestoil® Recall Investigation

2026-09-30T06:19:31Z

On September 3, 2026, Clorox Manufacturing Company of Puerto Rico, Inc. (“Clorox Puerto Rico”) issued a recall for its scented Mistolin® Dilutable Cleaners and Lestoil® Heavy Duty Multi-Purpose Cleaners due to potential bacteria contamination. The recalled products were manufactured between April 1, 2025 and June 17, 2026, displaying date codes beginning with the prefix “PR01” and followed by a five-digit number between 25091 and 26168. Walmart, Sam’s Club, Costco, Supermercados Econo, Supermercados Selecto, and other major retailers in Puerto Rico and the U.S. Virgin Islands sold them. Clorox Puerto Rico recalled about 6.3 million of these cleaning products due to concerns that they may contain bacteria, including Pseudomonas aeruginosa. According to the U.S. Consumer Product Safety Commission (“CPSC”), Pseudomonas aeruginosa poses “a risk of serious infection” to individuals with weakened immune systems and external medical devices. This recall is not the first time Clorox Puerto Rico’s parent company, Clorox Co., recalled products because of potential Pseudomonas aeruginosa contamination. In 2022, Clorox Co. recalled 37 million bottles of Pine-Sol given the same concern. The CPSC issued Clorox Co. a $14.15 million penalty related to this 2022 incident as Clorox Co. failed to immediately report the suspected bacterial hazard. Full refunds for the September 2026 recall are available to customers who register with Clorox Puerto Rico’s recall website and submit a picture of both the 12-digit UPC code and the date code. However, the recall includes products manufactured as early as April 1, 2025. It is likely that many customers who purchased the recalled products no longer have their bottle(s) and, consequently, do not qualify for a refund. If you purchased any of the below products, you can contact Goldenberg Schneider, LPA for additional information about your legal rights by calling [nap_phone id="LOCAL-CT-NUMBER-2"], sending an email to info@gs-legal.com or completing the “Contact Us” form to the right.

Recalled Mistolin® Dilutable Cleaners Scents

Sold in bottles of 28, 40, 64 and 128 fluid ounces, with date codes beginning with the prefix “PR01” and followed by a five-digit number between 25091 and 26168.

Alegra tu Día
Espíritu Play
Flores de Primavera
Fresco Despertar
Frescura de Lavanda
Frescura Tropical
Manzana y Canela
Pino y Especias and Sólo para Ti

Recalled Lestoil® Heavy Duty Multi-Purpose Cleaners Scents

Sold in bottles of 28, 40, 64 and 128 fluid ounces, with date codes beginning with the prefix “PR01” and followed by a five-digit number between 25091 and 26168.

Energía del Yunque
Fuerza de Lavanda Tropical
Intenso Limon Boricua and Olas de Rincón

FBI Data Breach Investigation

2026-09-24T19:19:33Z

Hacking and extortion group ShinyHunters claims to have breached certain Federal Bureau of Investigation (“FBI”) systems on September 21, 2026. The FBI since confirmed it is investigating hacking claims from a cyber-criminal enterprise group. Allegedly, ShinyHunters stole FBI employee and job applicant information including Personally Identifiable Information (“PII”) and Protected Health Information (“PHI”). Technology news outlet 404 Media evaluated a sample of the data ShinyHunters claims to have stolen. The outlet found addresses, phone numbers, dates of birth, and details on some individuals’ spouses. 404 Media confirmed that some of the phone numbers listed are associated with Department of Justice personnel. If you are an FBI employee or recent FBI job applicant, you can contact Goldenberg Schneider, LPA for additional information about your legal rights by calling [nap_phone id="LOCAL-CT-NUMBER-2"], sending an email to info@gs-legal.com or completing the “Contact Us” form to the right.

Archer-Daniels-Midland Co. Data Breach Investigation

2026-09-22T20:05:38Z

Archer-Daniels-Midland Co. (“ADM”) is a Fortune 500 company specializing in global agricultural supply chain management and processing. It allegedly experienced a recent data security incident, potentially exposing sensitive information belonging to some ADM employees. Threat intelligence platform, Ransomware.live, published a notice about an ADM data breach. According to the notice, the data breach occurred on or around September 15, 2026. Though ADM has yet to publicly confirm the data security incident, a lawsuit filed against ADM claims the company has already sent breach notices to impacted individuals. The same lawsuit alleges that the breach may have impacted employees’ names, Social Security numbers, birthdates, addresses, driver's license details, and financial information. If you are a current or former ADM employee and believe your information might have been impacted by the potential breach, you can contact Goldenberg Schneider, LPA for additional information about your legal rights by calling [nap_phone id="LOCAL-CT-NUMBER-2"], sending an email to info@gs-legal.com or completing the “Contact Us” form to the right.

CenterPoint Energy, Inc. Data Breach Investigation

2026-09-21T14:03:42Z

CenterPoint Energy, Inc. (“CPE”) is a publicly traded, Houston-based electric and natural gas utility company. It recently experienced a data security incident, potentially exposing the sensitive data belonging to what a threat actor claims to be 7.49 million CPE customers. On September 14, 2026, CPE filed a Form 8-K with the United States Securities and Exchange Commission. The form describes “an online post by a third party claiming to have obtained a data set containing certain of the Company’s customer information.” CPE is likely referring to a dark web post by a hacking/extortion actor alleging to have stolen 7.49 million CPE customers’ Personally Identifiable Information. Cyber Insider analyzed the post and explains that the threat actor claims to have stolen CPE customers’ names, phone numbers, email addresses, service and billing addresses, account and premise identifiers, billing amounts, payment information, autopay and paperless billing statuses, and the last four digits of Social Security numbers. In its September 14, 2026 Form 8-K, CPE confirmed that an unauthorized third party obtained certain CPE customers’ personal information, but CPE has yet to detail what information was compromised and how many of its customers were impacted. If you are a CPE customer and believe you might have been impacted by the data breach, you can contact Goldenberg Schneider, LPA for additional information about your legal rights by calling [nap_phone id="LOCAL-CT-NUMBER-2"], sending an email to info@gs-legal.com or completing the “Contact Us” form to the right.

Golden State Orthopedics & Spine

2026-09-18T05:50:50Z

Golden State Orthopedics and Spine (“GSOS”) is a private orthopedic practice with locations throughout northern California. It recently experienced a data security incident, potentially exposing the sensitive information belonging to an undisclosed number of GSOS patients. On or around July 2, 2026, GSOS discovered unusual activity within its network system. An investigation revealed that an unauthorized party accessed some patients’ Personally Identifiable Information (“PII”) and Protected Health Information (“PHI”). The compromised PII and PHI includes, but is not limited to, names, addresses, dates of birth, Social Security numbers, health insurance information, and medical diagnosis information. If you are a GSOS patient and believe you were impacted by the breach or if you receive a breach notice letter from GSOS, you can contact Goldenberg Schneider, LPA for additional information about your legal rights by calling [nap_phone id="LOCAL-CT-NUMBER-2"], sending an email to info@gs-legal.com or completing the “Contact Us” form to the right.

IDScan Data Breach Investigation

2026-09-16T03:22:04Z

IDScan is a New Orleans, Louisiana-based company providing identity authentication solutions to car rental services, bars, casinos, and more. IDScan recently experienced a data security incident, exposing sensitive information belonging to over 170 million North Americans. On September 1, 2026, cybersecurity expert Brian Krebs published a report about a service advertised on a Russian cybercrime forum. The service is called “Nexus” and contains scans of millions of Americans’ and Canadians’ identity documents. The identity documents on Nexus range from driver’s licenses to medical cards to passports and beyond. Information contained in these documents--including full names and government-issued identification numbers--constitutes Personally Identifiable Information. On September 4, 2026, IDScan confirmed that it experienced a data breach, and it learned of the data breach on September 1, 2026. The Federal Bureau of Investigations is investigation the incident, as is IDScan. If your identity document was found on Nexus or if you have rented a car in the past three years and scanned your driver’s license as part of the rental process, you can contact Goldenberg Schneider, LPA for additional information about your legal rights by calling [nap_phone id="LOCAL-CT-NUMBER-2"], sending an email to info@gs-legal.com or completing the “Contact Us” form to the right.

Luminis Health Data Breach Investigation

2026-09-11T20:40:06Z

Luminis Health (“Luminis”) is a non-profit healthcare network based in Annapolis, Marland. Luminis operates Luminis Health Doctors Community Medical Center, Anne Arundel Medical Center, and over 100 practice locations. The healthcare network recently experienced a data security incident, potentially impacting sensitive information belonging to Luminis patients. On August 31, 2026, according to reporting by WBAL-TV 11 News, Luminis informed state authorities that “technology issues” necessitated rerouting certain patients. Luminis has since confirmed that an unauthorized criminal actor carried out a cyber-attack against their systems. The data breach impacted patient care as some patients’ appointments and treatments were cancelled, MyChart was down, and Luminis facilities reverted to paper records. A September 10, 2026, incident update from Luminis describes continued network disruption. Luminis is conducting an ongoing investigation of the data security incident. If you are a patient at Luminis Health Doctors Community Medical Center, Anne Arundel Medical Center, or a Luminis practice, you can contact Goldenberg Schneider, LPA for additional information about your legal rights by calling [nap_phone id="LOCAL-CT-NUMBER-2"], sending an email to info@gs-legal.com or completing the “Contact Us” form to the right.