Cardinal Services, Inc., along with its affiliated entities Cardinal Employer Organization and Preferred Employer Solutions, sent breach notification letters after discovering an incident affecting personal information in its possession. The letter references breach dates of 06/25/2025, 06/26/2025, and 08/08/2025, but the copy of the notice available to us does not explain how the breach happened, so the attack vector is listed as unknown. If you’d like to see how a similarly structured breach played out for another organization, our writeup on the ERMI, LLC data breach walks through a comparable notification process.
