Robinson Nursery Data Breach Exposes Financial and Health Information

Robinson Nursery Inc., a family-owned wholesale nursery based in Amity, Oregon, disclosed a data breach that occurred in late February 2026.

On or about Feb. 22 and 23, 2026, an unauthorized party gained access to certain systems in the company's network environment. During this unauthorized access, the intruder removed files from the company's network.

On March 11, 2026, the ransomware group known as Akira posted on the dark web, claiming it obtained corporate data from Robinson Nursery. The stolen data reportedly included employee files such as scanned passports, driver's licenses, Social Security numbers, financial records, client and partner files, contracts and agreements, project-related materials and other internal corporate documents.

A forensic investigation later confirmed that the files removed from the network on or around Feb. 23, 2026, contained both personally identifiable information and protected health information. The investigation concluded approximately three and a half months after the breach, allowing the company to identify what data had been compromised.

The types of information exposed included full name, date of birth, Social Security number, passport numbers, tax identification number and driver's license number, financial account information, health insurance information and medical treatment information.

Robinson Nursery began notifying affected individuals on July 10, 2026, and posted a notice about the incident on its website with details about what happened and guidance on protective steps.

Robinson Nursery's response to the breach

Given the sensitive nature of the information involved in this breach, affected individuals may want to take their own steps to guard against identity theft and fraud.

Robinson Nursery's notification also included state-specific guidance and resources for residents of Iowa, Maryland, Massachusetts, New York, North Carolina, Oregon and New Mexico.

For questions about the incident, the company has set up a dedicated toll-free response line at 1-888-289-7169. The line is available for 90 days from the date notifications were sent, Monday through Friday from 9 a.m. to 9 p.m. Eastern Time, excluding holidays.