Robinson Nursery Data Breach Exposes Sensitive Personal and Health Information
Robinson Nursery Inc, a family-owned wholesale nursery based in Amity, Oregon, suffered a data breach between February 22 and 23, 2026, when an unauthorized third party accessed and exfiltrated files from its network. The company detected the incident on February 23, 2026, and a subsequent forensic investigation, completed on June 10, 2026, confirmed that the stolen data included sensitive personally identifiable information (PII) and protected health information (PHI).
The exposed data may have included:
- Full names
- Dates of birth
- Social Security numbers
- Passport and driver’s license numbers
- Tax identification and financial account information
- Health insurance and medical treatment details
On March 11, 2026, the ransomware group Akira claimed responsibility for the attack, posting on the Tor network that they had obtained employee files, financial records, client and partner data, and other confidential documents. Robinson Nursery began notifying affected individuals on July 10, 2026, offering guidance on mitigating potential risks.
The law firm Shamis & Gentile P.A. is investigating the breach and potential legal claims for those impacted. The incident highlights the growing threat of ransomware attacks targeting businesses with sensitive customer and employee data.
Source: https://www.claimdepot.com/investigations/robinson-nursery-data-breach-2026
Robinsons Nurseries Ltd cybersecurity rating report: https://www.rankiteo.com/company/robinsons-nurseries-ltd
"id": "ROB1784753329",
"linkid": "robinsons-nurseries-ltd",
"type": "Ransomware",
"date": "2/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 'Employees, clients, partners',
'industry': 'Agriculture (Wholesale Nursery)',
'location': 'Amity, Oregon, USA',
'name': 'Robinson Nursery Inc',
'type': 'Business'}],
'attack_vector': 'Unauthorized network access',
'customer_advisories': 'Guidance on mitigating potential risks provided to '
'affected individuals',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': ['Full names',
'Dates of birth',
'Social Security '
'numbers',
'Passport and '
'driver’s license '
'numbers',
'Tax identification '
'and financial '
'account information',
'Health insurance and '
'medical treatment '
'details'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Protected Health Information '
'(PHI)']},
'date_detected': '2026-02-23',
'date_publicly_disclosed': '2026-03-11',
'description': 'Robinson Nursery Inc, a family-owned wholesale nursery based '
'in Amity, Oregon, suffered a data breach between February 22 '
'and 23, 2026, when an unauthorized third party accessed and '
'exfiltrated files from its network. The stolen data included '
'sensitive personally identifiable information (PII) and '
'protected health information (PHI). The ransomware group '
'Akira claimed responsibility for the attack, posting on the '
'Tor network that they had obtained employee files, financial '
'records, client and partner data, and other confidential '
'documents.',
'impact': {'brand_reputation_impact': 'Potential reputational damage',
'data_compromised': 'Sensitive personally identifiable information '
'(PII) and protected health information (PHI)',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential legal claims',
'payment_information_risk': 'High',
'systems_affected': 'Network files'},
'investigation_status': 'Completed (forensic investigation finished on June '
'10, 2026)',
'motivation': 'Financial gain, Data exfiltration',
'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'Akira'},
'references': [{'date_accessed': '2026-03-11',
'source': 'Ransomware group Akira (Tor network)'},
{'source': 'Shamis & Gentile P.A. (Law Firm)'}],
'regulatory_compliance': {'legal_actions': 'Potential legal claims (Shamis & '
'Gentile P.A. investigating)'},
'response': {'communication_strategy': 'Notified affected individuals on July '
'10, 2026',
'third_party_assistance': 'Forensic investigation'},
'threat_actor': 'Akira',
'title': 'Robinson Nursery Data Breach Exposes Sensitive Personal and Health '
'Information',
'type': 'Data Breach, Ransomware'}