Cedar Valley Services Data Breach Impacts 79,152

On Feb. 13, 2026, Cedar Valley Services, a nonprofit organization based in Southern Minnesota, reported a data breach to the U.S. Department of Health and Human Services.

The incident was classified as a ransomware attack, with the Qilin ransomware group claiming responsibility. On Dec. 21, 2025, Qilin posted on the Tor network, stating they had obtained data from Cedar Valley Services.

The breach was in both its method and potential impact. While the specific types of information exposed have not been detailed in the public disclosure, organizations like Cedar Valley Services typically handle a range of sensitive data, including personally identifiable information (PII) such as names, addresses, and Social Security numbers, as well as protected health information (PHI) related to the services they provide.

A total of 79152 individuals were impacted, including 1,154 residents of Indiana.

Cedar Valley Services' response

After discovering the breach, Cedar Valley Services notified federal authorities and began investigating the incident. The organization has not publicly detailed the specific steps taken to contain the breach or the exact resources made available to those affected. However, in ransomware cases, common best practices include securing systems, working with cybersecurity experts, and notifying impacted individuals.

Individuals who may have been affected should remain vigilant. It is recommended to monitor credit reports, review account statements for unusual activity, and consider placing a fraud alert or credit freeze with major credit bureaus.

Since both PII and PHI may have been compromised, individuals should also be alert for potential identity theft or misuse of medical information.