Operation PAR Confirms Data Breach and Exposure of Social Security Numbers

On June 10, 2025, Florida-based Operation PAR, discovered a data breach.

According to the official security incident notification, the organization learned that an unauthorized party had gained access to sensitive information.

The breach was extensive in scope: the threat actor group named Worldleaks claimed responsibility for the attack, posting about the incident on the dark web on July 2, 2025. They alleged to have accessed and exfiltrated 485.2 GB of data.

The information exposed in this breach was finalized on June 10, 2026, and included names, dates of birth, driver's license numbers, financial account information, Social Security numbers, medical information and health insurance details.

Operation PAR began notifying impacted individuals on June 25, 2026, a full year after initial discovery of the unauthorized access. Additionally, the company posted an updated security incident notification to its website.docx) on June 24, 2026.

A total of 145,714 individuals were impacted, including 375 residents of Massachusetts.

Operation PAR's response

For those potentially affected, Operation PAR has set up a dedicated toll-free response line at 866-659-7103, available Monday through Friday, 8 a.m. to 8 p.m. Central time, excluding major U.S. holidays, to answer questions and provide additional information.

The organization urges clients and employees to remain vigilant by regularly reviewing financial account statements and explanation of benefits statements from health insurance providers.