UnknownHigh
Cardinal Services
bd_758bd2f1d1e91ee4 · schema v1 · pii pii-v1
Full breach record for Cardinal Services →Cardinal Services, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2026-05-27. The breach occurred during 6/30/2025 - 8/8/2025. The breach was discovered on 6/30/2025. 128,551 individuals were affected. Notice was sent on 5/20/2026.
Oregon clock✗ OR AG >45d47 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed128,551 affectedView incident
A leak claim by rhysida about this victim predates this filing by 315 days.View originating leak claim
Source provenance
- Source URL
- https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 27, 2026
- Raw hash
- 1549973f296f168aec66837954eb46f04daa7522abf4f0bc0c941e99986971fe
Reporting entity
- Name
- Cardinal Servicesnorm: cardinal services
- Domain
- cardinalservices.org
Victim entity
- Name
- Cardinal Servicesnorm: cardinal services
- Domain
- cardinalservices.org
Incident
- Discovered
- Jun 30, 2025
- Materiality determined
- —
- Notification sent
- May 20, 2026
- Affected individuals
- 128,551
- Data types
- —
- Attack vector
- Unknown
- Threat actor
- External
Compliance
- Time to disclose
- 47 weeks(331 days from discovery to filing)
- Compliance flags
- OR AG >45dLeak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.