https://privacyunpacked.com/breaches/company/yellow/feed.xml 2026-06-26T00:00:00Z Privacy Unpacked https://privacyunpacked.com/breaches/company/yellow/#yellow-2026-07-08 2026-06-26T00:00:00Z

Yellow (KS, United States) notified the Oregon Department of Justice, the Vermont Attorney General, the Texas Attorney General, the Indiana Attorney General, the California Attorney General and the Washington Attorney General of a data breach on 26 June 2026. It told the states about 258,498 Oregon residents; the total can be higher. Exposed: Social Security numbers, Driver’s license numbers, Government ID numbers, Health insurance details, Health and medical information and Financial account and card details and more. The breach began on 22 March 2025, 461 days before it was reported.