Nonprofit data breaches and cyber incidents
cisonews.net logs 2 disclosed security incidents at nonprofit organizations: 1 state breach notice, 1 substitute breach notice, first disclosed between June 1, 2026 and November 5, 2026. The newest are Hands On Children's Museum (November 5, 2026), Legal Services of Long Island, Inc. (June 1, 2026). 2 of the 2 state how many people were affected.
Sector labels are ours, based on each filer's SEC industry code or, for breach notices, what the notice says about the organization.
How many nonprofit data breaches are in the log, by year?
2 entries, counted under the year of the first disclosure.
| Year | Entries |
|---|---|
| 2026 | 2 |
What information was exposed in nonprofit data breaches?
2 of the 2 entries list the categories of information their document says were involved. Share of those entries naming each type:
| Information named | Entries | Share |
|---|---|---|
| Dates of birth | 2 | 100% |
| Social Security numbers | 2 | 100% |
| Addresses, phone numbers or email | 1 | 50% |
| Financial account or payment card data | 1 | 50% |
| Medical or treatment information | 1 | 50% |
| People's names | 1 | 50% |
How these figures are made: each is counted at build time from the entries listed below. Totals are the figure the organization reported to the regulator named, copied from the regulator's list and cited on the entry; a company's own filing may give a different number or none. Information types group the categories each entry copies from its document, so an entry counts once per type.
| 2026-11-05 |  Hands On Children's Museum | Nonprofit | State breach notice (Washington AG) | 2026-10-08 | 28 | 0 |
| 2026-06-01 |  Legal Services of Long Island, Inc. | Nonprofit | Substitute notice (organization website) | 2025-11-23 | 190 | 0 |