Regulator-posted notice

Breach notice filed by Cardinal Services, Inc, Cardinal Employer Organization, and (May 2026)

Organization named: Cardinal Services, Inc, Cardinal Employer Organization, and Provisional: identity as filed, not yet matched to the directory

What the sources say

Washington Attorney General data breach notifications Primary notice

Posted on the Washington Attorney General data breach notifications with a submission date of May 20, 2026.

Organization as reported: Cardinal Services, Inc, Cardinal Employer Organization, and
Information types as reported: Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Passport Number; Medical Information
Incident dates as reported: June 30, 2025
Submission date: May 20, 2026
Observed by BreachRecords: 2026-10-19 04:56 UTC (revision 25188, page:1:row:42)
Archived copy: Held in the private archive (provenance)

The listing records a filing with the agency; it is not a finding by the agency.

Washington data breach notifications dataset (data.wa.gov sb4j-ca4h) Duplicate filing

Posted on the Washington data breach notifications dataset with a submission date of May 20, 2026.

Organization as reported: Cardinal Services, Inc, Cardinal Employer Organization, and, OR
Entity type as reported: Business
Category as reported: Cyberattack; Ransomware
Incident dates as reported: June 30, 2025 to Aug. 8, 2025
Discovery date as reported: June 30, 2025
Submission date: May 20, 2026
Observed by BreachRecords: 2026-11-01 20:03 UTC (revision 63875, row:1591)
Extraction: Parsed from a document; extraction confidence 0.85
Archived copy: Held in the private archive (provenance)

The listing records a filing with the agency; it is not a finding by the agency.

Figures, per source

2,066 individuals affected (residents of the reporting state), according to the Washington Attorney General data breach notifications, source date May 20, 2026, revision observed 2026-10-19.
2,066 individuals affected (residents of the reporting state), according to the Washington data breach notifications dataset, source date May 20, 2026, revision observed 2026-11-01.

Each figure is one source's figure with the basis that source gave. Figures from different sources are shown side by side and are not added, averaged or chosen between.

Timeline

Source dates are the dates the sources give. Observation dates are when BreachRecords recorded each revision.

2026-05-20Submission date (Washington Attorney General data breach notifications)
2026-05-20Submission date (Washington data breach notifications dataset)
2026-10-19Observed by BreachRecords (revision 25188)
2026-11-01Observed by BreachRecords (revision 63875)
2026-11-04Approved by a reviewer

Organizations linked by a reviewer

Cardinal Services, Inc, Cardinal Employer Organization, and Named as the filer Provisional: identity as filed, not yet matched to the directory Linked 2026-11-04, method manual.

Archived evidence

264d45f73831ec8fc298837002b836f792a7cfd7f3d6b4d2128484a23223c042
text/csv, 453,656 bytes, retrieved from Washington data breach notifications dataset, 2026-11-01 20:03 UTC. Archived privately · Provenance · Source page
298a6e41d325d1ead4773468859b15ca7ae65050e57a23ca3b3cc96df8dcdfc0
text/html, 156,044 bytes, retrieved from Washington Attorney General data breach notifications, 2026-10-19 04:56 UTC. Archived privately · Provenance · Source page

Records reflect source filings as of the dates shown. BreachRecords is not a regulator.

Request a correction

A record that disagrees with its source, names the wrong organization or duplicates another is corrected after review. This form is about Breach notice filed by Cardinal Services, Inc, Cardinal Employer Organization, and (May 2026). We acknowledge every request within two business days. We reply by email.

The form is being set up. Check back soon.