Edelson Lechtzin LLP is investigating two separate reported data-security incidents: a Millstone Medical Outsourcing LLC breach involving potentially exposed personal, financial and health information, and a World Acceptance Corporation network incident involving personal information. Millstone said an unauthorized party accessed its systems from December 15 to December 19, 2025, detected suspicious activity on December 16, and confirmed through a July 15, 2026 data review that personal information was involved. Millstone reported the incident to the Vermont Attorney General’s Office on September 21, 2026, while the number of affected individuals and attacker’s identity remain unconfirmed. WAC determined on or about September 8, 2026, that certain personal information may have been involved after an unknown party accessed its network, but has not publicly confirmed the breach date, affected population or attacker’s identity. Both companies offered 24 months of identity or credit-related protection, and Edelson Lechtzin is offering free, confidential case evaluations for notified individuals.