Progress Foundation, a nonprofit mental health care provider based in San Francisco, California, has disclosed a data security incident involving the inadvertent disclosure of employee W-2 tax forms to an unauthorized party. If you received a notification letter from Progress Foundation about this incident, your name and Social Security number may have been exposed — and you may have legal rights.
What Happened?
On February 2, 2026, Progress Foundation became aware that employee W-2 forms had been inadvertently disclosed to an unauthorized party. Upon discovering the incident, the organization immediately launched an investigation to assess the scope of the breach and confirm the security of its internal systems.
The investigation revealed no signs of unauthorized access to Progress Foundation’s internal systems. However, the W-2 documents themselves were obtained by an unauthorized actor. Progress Foundation also notified federal law enforcement and the Internal Revenue Service in connection with this incident. The breach was reported to the California Attorney General and other state attorneys general on February 12, 2026.
What Information Was Exposed?
According to Progress Foundation’s official breach notice, the information involved in this incident includes:
- Full name
- Social Security number
This information was contained in employee W-2 tax forms. The exposure of Social Security numbers combined with names creates a meaningful risk of identity theft and tax fraud.
What Is Progress Foundation Doing?
Progress Foundation is offering affected individuals complimentary credit monitoring and identity theft protection services through Epiq. To enroll, affected individuals should use the enrollment code provided in their notification letter and follow the instructions included in that letter. For questions, individuals may write to Progress Foundation at 368 Fell Street, San Francisco, CA 94102.
Your Rights as an Affected Individual
The exposure of Social Security numbers through the inadvertent disclosure of W-2 forms can have lasting consequences for affected individuals, including the risk of fraudulent tax return filings and new account fraud. If your information was exposed in the Progress Foundation data breach, you may be entitled to compensation for:
- The unauthorized exposure of your name and Social Security number
- Costs associated with credit and identity monitoring
- Actual financial losses resulting from identity theft or tax fraud
- Emotional distress caused by the exposure of your personal information
Contact Wilshire Law Firm for a Free Consultation
If you received a notification letter from Progress Foundation about this data breach, Wilshire Law Firm wants to hear from you. Our legal professionals offer free, confidential consultations and can help you understand your rights.
We take no fees unless you get paid.
Contact us online to speak with a legal professional today.

