Progress Foundation Data Breach Exposes Sensitive Employee Information
Shamis & Gentile P.A., a class action law firm specializing in data breach cases, is investigating a security incident involving Progress Foundation, a San Francisco-based nonprofit providing mental health rehabilitation and recovery services since 1969.
On February 2, 2026, Progress Foundation suffered a data breach when employees’ W2 forms were accidentally disclosed to an unauthorized party. The organization detected and investigated the incident before notifying the California Attorney General’s office on February 12, 2026, and the Vermont Attorney General’s office on February 13, 2026. The exact number of affected individuals has not been disclosed.
The exposed data includes names and Social Security numbers, putting those impacted at risk of identity theft and financial fraud. Legal representatives are reviewing potential compensation claims for affected individuals.
Source: https://www.claimdepot.com/investigations/progress-foundation-data-breach-2026
Progress Foundation cybersecurity rating report: https://www.rankiteo.com/company/progress-foundation
"id": "PRO1771000800",
"linkid": "progress-foundation",
"type": "Breach",
"date": "2/2026",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Mental Health Rehabilitation and Recovery '
'Services',
'location': 'San Francisco, California, USA',
'name': 'Progress Foundation',
'type': 'Nonprofit'}],
'data_breach': {'file_types_exposed': 'W2 forms',
'personally_identifiable_information': 'Names, Social '
'Security numbers',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Employee W2 forms, personally '
'identifiable information'},
'date_detected': '2026-02-02',
'date_publicly_disclosed': '2026-02-12',
'description': 'Progress Foundation, a San Francisco-based nonprofit '
'providing mental health rehabilitation and recovery services, '
'suffered a data breach when employees’ W2 forms were '
'accidentally disclosed to an unauthorized party. The exposed '
'data includes names and Social Security numbers, putting '
'those impacted at risk of identity theft and financial fraud.',
'impact': {'data_compromised': 'W2 forms, names, Social Security numbers',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential compensation claims'},
'investigation_status': 'Under investigation',
'references': [{'source': 'Shamis & Gentile P.A.'}],
'regulatory_compliance': {'regulatory_notifications': ['California Attorney '
'General’s office',
'Vermont Attorney '
'General’s office']},
'title': 'Progress Foundation Data Breach Exposes Sensitive Employee '
'Information',
'type': 'Data Breach'}