1. [News](/news) 2. Cardinal Services data breach: what happened and what's at risk # Cardinal Services data breach: what happened and what's at risk A data breach involving Cardinal Services was reported in May 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team May 21, 2026 Table of Contents * [What happened in the Cardinal Services data breach?](#what-happened-in-the-cardinal-services-data-breach) * [Who is behind the incident?](#who-is-behind-the-incident) * [Impact and risks for Cardinal Services customers](#impact-and-risks-for-cardinal-services-customers) * [How to protect against similar security incidents](#how-to-protect-against-similar-security-incidents) ## Key facts: Cardinal Services data breach * Date occurred June 25, 2025 * Date discovered May 12, 2026 * Date reported May 20, 2026 * Target entity Cardinal Services * Source of breach Unknown, unauthorized third-party * Data types Names * Status Confirmed; reported on May 20, 2026. * Severity Medium; unauthorized access to personal information of over 140,000 individuals. ## What happened in the Cardinal Services data breach? On May 20, 2026, Cardinal Services (cardinalservices.com) reported a data breach that also impacted Cardinal Employer Organization and Preferred Employer Solutions. The incident was characterized as an external system breach resulting from hacking. The unauthorized access occurred in two separate periods: first between June 25 and June 26, 2025, and subsequently on August 8, 2025. The breach was discovered by the organization on May 12, 2026. The incident affected a total of 142,323 individuals and involved the exposure of names. The medium severity rating reflects the significant number of records compromised and the nature of the unauthorized access. While the specific motives of the attackers remain unknown, such incidents typically involve the acquisition of personal data for fraudulent purposes, including secondary social engineering attacks or identity theft. ## Who is behind the incident? The attacker or cause of the incident has not been identified. ## Impact and risks for Cardinal Services customers For the 142,323 individuals affected by the Cardinal Services breach, the primary risk is potential identity theft and targeted phishing. Although the report specifically mentions names, hackers often use such information to personalize fraudulent communications, making them appear more legitimate to the recipient. There is also a risk that this data could be cross-referenced with other leaked datasets to facilitate more complex financial fraud or credential harvesting. Typical outcomes for victims include an increase in unsolicited contact and attempted account takeovers. Affected individuals should promptly enroll in the offered credit monitoring services and maintain a high level of skepticism toward unexpected emails or phone calls. Consistent monitoring of financial accounts and credit reports remains one of the most effective ways to detect and mitigate the impact of data exposure. ## How to protect against similar security incidents In response to the Cardinal Services breach involving the names of over 140,000 individuals, it is important to take immediate steps to secure your personal information and digital identity. * **Enroll in credit monitoring services.** Register for the 12 months of identity theft protection provided by Epiq as offered in the notification. Monitor your credit reports from major bureaus for any unauthorized accounts or inquiries. Set up fraud alerts or a credit freeze if you suspect your information is being misused. * **Practice heightened email security.** Be cautious of phishing attempts that use your name to appear authentic. Verify the sender’s identity through official channels before clicking links or providing information. Enable multi-factor authentication (MFA) on all sensitive accounts to prevent unauthorized access. * **Implement continuous attack surface management.** Organizations should utilize tools to monitor their digital footprint for vulnerabilities and misconfigurations. Ensure all external-facing systems are patched and secured against known hacking vectors. Review and limit third-party access to internal systems to reduce the potential impact of a breach. > Taking proactive measures and utilizing provided security services are critical steps in protecting yourself after a data exposure event. ## Frequently asked questions ### What happened in the Cardinal Services security breach? On May 20, 2026, Cardinal Services (cardinalservices.com) disclosed a security breach. According to initial reports, an external system breach due to hacking affected 142,323 individuals associated with Cardinal Services, Inc, Cardinal Employer Organization, and Preferred Employer Solutions. ### When did the Cardinal Services breach occur? The Cardinal Services breach was publicly reported on May 20, 2026. The unauthorized access occurred between June 25 and June 26, 2025, and again on August 8, 2025, before being discovered on May 12, 2026. ### What data was exposed? The types of data involved in the Cardinal Services incident have been confirmed to include names. This page will be updated as verified information becomes available regarding any other compromised data categories. ### Is my personal information at risk? If you interacted with Cardinal Services, there’s a possibility your personal information could be affected. Similar incidents often involve names, email addresses, or other personal identifiers. Stay alert for updates and take precautionary measures to secure your accounts and monitor your credit. ### What steps should companies take after being breached? Cardinal Services has sent written notifications to affected individuals and is offering 12 months of credit monitoring and identity theft protection through Epiq. The company is expected to review its security protocols and enhance its system monitoring to prevent future unauthorized access. ## Is your organization exposed to a similar risk? UpGuard continuously monitors vendors for exposed credentials and infrastructure risk, so you can catch the next breach before it becomes a headline. [Start your free trial](https://cyber-risk.upguard.com/register/trial) Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](https://www.upguard.com/instant-security-score?) ## Latest news Stay up-to-date with the latest news in cybersecurity. * ### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20) A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 20, 2026 * ### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19) A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 17, 2026 * ### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures. UpGuard Team July 16, 2026 * ### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16) A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 * ### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 * ### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16) A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 [View all news](/news) ## Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.