Resource Corporation of America Breach

Resource Corporation of America (RCA) disclosed a data security incident after detecting suspicious activity on December 17, 2025. RCA says an unauthorized actor accessed certain systems and copied files between December 9 and December 17, 2025, and that it is still reviewing the affected files to determine exactly what information was involved and which individuals are impacted. In its notice, RCA said the potentially affected data could include sensitive personal and health-related information-such as names, addresses, dates of birth, Social Security numbers, health insurance details, and medical diagnosis/treatment information-though it reported no confirmed misuse at the time of publication.