Service by Medallion, Inc. reported a data breach in California involving unauthorized access to employee email accounts between August 21, 2021, and January 16, 2022. The incident involved phishing leading to credential compromise. Personal information exposed included names and Social Security Numbers. The company secured systems, notified regulators, and offered 12 months of credit monitoring.