2026 Phishing breach — payment and membership data
Data compromised
SSNs, names, addresses, emails, driver's licenses, bank/credit card info, membership forms, payment data
Technical writeup
CHP 11-99 Foundation experienced a data breach on September 16, 2025 when an employee fell for a phishing email. IT help desk mistakenly identified the link as safe. Attacker gained full access to email account for eight days. Exposed SSNs, names, addresses, email addresses, driver's license numbers, bank and credit card information, membership forms, payment and merchandise purchase data. Notifications sent starting January 20, 2026.
Root cause
Phishing; employee compromise; IT misidentification of malicious link.