Knights of Columbus Data Breach Exposes Medical Records and SSNs

Knights of Columbus, a Catholic fraternal benefit society that provides life insurance and financial services to its members worldwide, disclosed a data breach that occurred at AutoAPS, a medical record retrieval services company.

The breach was disclosed to the Massachusetts Office of Consumer Affairs and Business Regulation on Aug. 3, 2026. The total number of individuals affected across the United States has not been publicly reported.

AutoAPS held files that contained sensitive information on behalf of Knights of Columbus. On December 25, 2025, the vendor identified suspicious activity in its network.

AutoAPS notified its affected client, Knights of Columbus on May 4, 2026, of the data breach that compromised both personally identifiable information and protected health information belonging to individuals associated with the organization.

The personally identifiable information exposed in the breach included names, addresses, dates of birth, email addresses, phone numbers, Social Security numbers, driver's license numbers and financial information.

The breach also compromised protected health information, including medical records and other medical information.

Knights of Columbus' response to the breach

Knights of Columbus is offering identity protection services to those affected by the breach. The notification directed individuals with questions about enrollment or their identity protection services to contact the company for assistance.

The company's notification also provided detailed guidance on how to place security freezes with the three major credit reporting bureaus: Experian, TransUnion and Equifax.