SHEPPARD, MULLIN, RICHTER & HAMPTON LLP

Sheppard, Mullin, Richter & Hampton LLP based in Los Angeles, California, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-09-01 and reported on 2026-10-06. 2,326 Texas residents were affected. 204,001 individuals affected in total. Types of information involved: Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Other. Consumers were notified via U.S. Mail.

They offered $4.900.000 to keep the data from being published.

Sheppard, Mullin, Richter & Hampton LLP experienced a social engineering incident on August 31, 2026, where a single attorney was tricked into disclosing documents to an unknown third party. The firm became aware on September 1, 2026. No network compromise occurred. Personal information, including basic identity data, was exposed in impacted files. The firm engaged forensic experts, notified law enforcement, and is offering 24 months of credit monitoring.

Sheppard, Mullin, Richter & Hampton, LLP reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-10-02. The reporting organization type is Other Commercial. 21 Vermont residents were affected. Categories of data breached: Social Security Numbers.

Sheppard, Mullin, Richter & Hampton LLP reported a data breach to the Oregon Attorney General. The breach was reported on 2026-10-02. The breach occurred during 8/31/2026 - 8/31/2026. The breach was discovered on 9/1/2026. 204,001 individuals were affected. Notice was sent on 10/2/2026.

Sheppard, Mullin, Richter & Hampton LLP disclosed a security incident on August 31, 2026, where a single attorney fell victim to a social engineering attack, resulting in the unauthorized disclosure of client documents to an unknown third party. The firm detected the incident on September 1, 2026, engaged forensic experts, and notified law enforcement. No unauthorized access to firm systems occurred. The firm is offering 24 months of credit monitoring and identity protection services to affected individuals.

Global Consulting Services & Software Development notified the NH AG of a data incident affecting 6 NH residents. Unauthorized access occurred Jan 3-7, 2026; discovered May 12, 2026. Names and SSNs were accessed. GCS offered 24 months of Kroll identity monitoring.

MAG DS Corp. (dba MAG Aerospace) reported an external system breach (hacking) occurring between August 30-31, 2025. The incident affected 4,280 individuals, including 8 Maine residents. Personal information, including names and other identifiers, was accessed. The company engaged forensic experts, contained the breach, notified law enforcement, and is offering 24 months of credit monitoring.

MAG DS Corp. (dba MAG Aerospace) notified the New Hampshire Attorney General of a data incident where an unauthorized third party accessed personal information (DOB, SSN) of 6 NH residents between Aug 30-31, 2025. The breach was discovered on Dec 1, 2025. MAG engaged forensic experts, contained the network, reset passwords, and contacted law enforcement. Affected individuals are offered 24 months of credit monitoring.

Delta Dental of California and affiliates reported a supplemental breach affecting 106,098 Washington residents. Unauthorized actors exploited a zero-day vulnerability in MOVEit Transfer software between May 27-30, 2023. The incident was discovered on June 1, 2023. Affected data included names, SSNs, driver's licenses, financial accounts, and health information. Notifications were sent in December 2023.

NextGen Healthcare, Inc. reported unauthorized access to NextGen Office system between March 29 and April 14, 2023. An unknown third party used stolen client credentials to access personal information (name, DOB, address, SSN) of 21,981 Washington residents. NextGen engaged forensic experts, reset passwords, contacted law enforcement, and offered 24 months of credit monitoring.

Doosan Fuel Cell America, Inc. (DFCA) notified the New Hampshire Attorney General of a data incident affecting 8 NH residents (approx. 1,300 total). An unknown threat actor accessed personal information of employees/contractors on file servers managed by an IT vendor between Jan 3 and Jan 22, 2021. DFCA engaged forensic investigators, implemented password resets, MFA, and enhanced security controls. Notices were mailed on April 27, 2021. Data included names and contact info; no evidence of misuse was found.

El Centro Regional Medical Center (ECRMC) notified the Montana AG of a data breach involving its vendor Jobscience. An unknown actor exploited an Adobe ColdFusion vulnerability to access ECRMC job applicant data between May 8-11, 2018. ECRMC was notified in late August 2018. Data exposed included names, addresses, phone numbers, usernames, passwords, emails, and SSNs. 5 Montana residents were affected. Notifications were sent in November 2018.

Williams-Sonoma, Inc. notified the NH AG that a call center associate improperly requested customers' CVV numbers during purchases. One NH resident was affected. Notification was sent July 31, 2018. The associate was terminated and police were notified.

Sonic Corp. notified the NH Attorney General on Oct 5, 2017, of a malware attack at certain Sonic Drive-In locations where credit/debit card numbers may have been acquired without authorization. Discovery was Sept 18, 2017. Sonic engaged forensic investigators and law enforcement. Affected individuals were offered 24 months of credit monitoring.

NEO Tech experienced a phishing incident on January 27, 2017, where an employee was tricked into sending W-2 data containing SSNs, names, addresses, and income information to an unauthorized recipient. Four New Hampshire residents were affected. The company notified the IRS and state tax authorities, provided identity monitoring services, and is conducting an internal investigation.