Optima Tax, CPAP Med Services Announce Breaches

At McShane & Brady, we wanted to make everyone aware of some the most recent data breaches. If you or someone you know who may have been affected by these or any other breaches, please call our office at 816-888-8010 or use our contact form on our website. We want to hold those entrusted with protecting our private information responsible.
Workday
Workday, a major provider of human resources technology, has confirmed a data breach that resulted in the theft of personal information from one of its third-party customer relationship databases.
According to a blog posted by Workday, “threat actors contact employees by text or phone pretending to be from human resources or IT. Their goal is to trick employees into giving up account access or their personal information.”
According to a TechCrunch report, Workday serves more than 11,000 corporate customers and supports at least 70 million users globally. According to Bleeping Computer, the breach was detected on August 6th.
Optima Tax Relief
Optima Tax Relief, LLC identified unusual activity in its network on May 1, 2025.
According to the notice of a data incident report filed with the Office of the Maine Attorney General, an investigation determined that an unauthorized person accessed the network between May 1, 2025, and May 6, 2025, and took copies of certain files.
This incident has impacted a total of 3,114 individuals. Notice of data breach letters are being sent to those who have impacted by this breach.
CPAP Medical Supplies & Services
CPAP Medical Supplies and Services Inc. that specializes in providing medical supplies and services related to CPAP therapy, which is crucial for patients with sleep apnea and other respiratory conditions.
The breach took place on December 13, 2024 and was discovered on June 27, 2025. According to a filing with Office of the Maine Attorney General, 90,000 people have been affected.
Information potentially disclosed may include names, addresses, phone numbers, and email addresses, health insurance information, dates of birth, and protected health information, potentially including medical and treatment details.
On August 15, 2025, CPAP began notifying individuals whose information may have been included in the files accessed by the unauthorized party
If you receive notification of these breaches or any other data breaches, we ask that you call our office at 816-888-8010 or email us at firm@mcshanebradylaw.com.
From hospitals, healthcare providers, government services, service providers to insurance companies, proper precautions and training have not been made to secure these records. Once public, your information is out there for everyone to see. McShane & Brady is leading firm representing those who have affected by a data breach.