Progress Foundation Data Breach Exposes SSNs

On Feb. 2, 2026, Progress Foundation, a nonprofit mental health care provider based in San Francisco, experienced a data breach involving the inadvertent disclosure of employee W-2 forms to an unauthorized actor. Upon discovery, the organization began investigating the incident.

According to the official notice, there is no evidence that Progress Foundation’s internal systems were compromised; rather, the breach resulted from the accidental sharing of sensitive documents outside the organization.

The exposed information included personally identifiable information (PII) such as names and Social Security numbers.

Starting on Feb 12, 2026, the breach was reported to the attorneys general offices of California, Massachusetts, and Vermont.

So far, the incident has affected one individual in Massachusetts. The total number of people affected has not been disclosed.

Progress Foundation’s response

To support those affected, Progress Foundation is offering complimentary credit monitoring and identity protection services through Epiq Privacy Solutions.

Impacted individuals can enroll in these services to receive credit monitoring, VantageScore credit reports, Social Security number monitoring, dark web monitoring, change of address monitoring, credit freeze assistance, and up to $1 million in identity theft insurance.

The enrollment process and details are provided in the official notice sent to affected individuals.

Given the nature of the breach, affected individuals are encouraged to remain vigilant by monitoring their financial accounts, reviewing their credit reports, and considering placing a fraud alert or credit freeze with the major credit bureaus.

The organization has also provided information on how to contact the credit bureaus and the Federal Trade Commission for additional resources and support.