2026 Central National Gottesman — ransomware attack per law-firm reports; notices from August 28 may include SSNs; PayoutsKING claims 726 GB (unverified)
Data compromised
Per law-firm and aggregator summaries, the data may include Social Security numbers. ClaimDepot also lists government ID, medical and financial information. No count has been published in the sources reviewed.
Technical writeup
Root cause
Edelson Lechtzin LLP's September 1, 2026 press release says the breach reportedly stems from a March 2, 2026 ransomware attack, and that Central National Gottesman began notifying individuals on August 28, 2026. BreachSense names PayoutsKING as the actor, with a March 12, 2026 discovery date. The group claims 726 GB of internal data, which is unverified. The company's own notice letter and any state attorney general filing were not reviewed. Two former employees sued in April 2026 over data protection and notification delays, and a putative class action was filed May 6, 2026, per a court-record listing.