The incident, attributed to the Payouts King ransomware group, first occurred on March 2, 2026. While the company began notifying victims on August 28, the delay has already prompted litigation from former employees who allege the firm failed to adequately safeguard private data. The scope of the exposed information includes driver’s license numbers, dates of birth, and detailed medical records, creating a significant long-term risk for identity theft and financial fraud.

Edelson Lechtzin LLP is providing free consultations for those who received official notification letters. Affected individuals are advised to immediately place credit freezes with Equifax, Experian, and TransUnion. Experts also recommend monitoring medical benefit statements for unauthorized services and remaining vigilant against phishing attempts that often leverage breach details to target victims.