Where does the CyrusOne, Inc case file come from?

Every entry is taken from the breach report CyrusOne, Inc lodged with the Indiana Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: CyrusOne, Inc Data Breach

This file collects the dated facts on record for the CyrusOne, Inc incident. The state report is dated October 22, 2026. The incident itself is dated August 4, 2026.

Timeline

79 days separate the incident date from the date it was reported.

August 4, 2026Incident dateWhen the filing says the breach took place.
October 22, 2026Report filed in IndianaDate the notice was lodged with the Indiana Attorney General.

Case facts

Filing state: Indiana
Date reported: October 22, 2026
Incident date: August 4, 2026
Receiving office: Indiana Attorney General

Case notes

CyrusOne, Inc. has publicly filed notice of a data security incident with Indiana state regulators. The report, dated October 22, 2026, provides details on an event that potentially compromised personal information held by the company. These disclosures are part of standard regulatory requirements when such incidents occur, informing both authorities and potentially affected individuals.

The breach itself took place on August 4, 2026, several weeks prior to the official notification. While the filings confirm that personal information was involved in the incident, the specific categories of data that were exposed have not been detailed in the public records available. This means that individuals cannot yet determine precisely what kind of information might have been accessed.

The current investigation status is listed as "monitoring," indicating that the situation is under active review. Further specifics regarding the nature of the breach, the number of individuals affected, or any particular data types are not included in the public filing. This information is drawn directly from the official notification provided to state regulatory bodies.

Individuals who receive direct notification from CyrusOne, Inc. regarding this incident should remain vigilant. It is always wise to carefully review statements from all accounts, be cautious of any unsolicited communications, and consider enabling two-factor authentication where available for online services. Staying alert to unusual activity is a general, recommended step following any data security event.

Questions about this case file

Where does the CyrusOne, Inc case file come from?: Every entry is taken from the breach report CyrusOne, Inc lodged with the Indiana Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Indiana data breaches

Filing source: Indiana Attorney General

Named in the CyrusOne, Inc breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Indiana case files