Notices, last 30 days

California, Washington, Oregon

California, last 90 days

155

Counts not published

Washington, last 90 days

776,959 residents affected

Oregon, last 90 days

26,799,556 residents affected

Breach notices per week

Weeks start Monday, dated by when the notice was reported. The latest week may be incomplete. States: California, Washington, Oregon.

All notices, newest first

Download CSV

1,062 entries. Page 1 of 22.

Reported	Organization	State	Breach date	Residents affected	Data exposed
Oct 29	Bangkok Bank PCL - New York Branch	CA	Sep 17, 2025	–	–
Oct 29	Del Monte Foods Corporation II Inc.	CA	Feb 7	–	–
Oct 28	Troutman Pepper Locke LLP	CA	Aug 7	–	–
Oct 28	Photon Health	CA	Aug 10	–	–
Oct 27	Sarasota US Topco, Inc. d/b/a Sarku Japan (“Sarku”)	CA	Sep 7	–	–
Oct 27	Hitec Group USA	CA	Sep 13	–	–
Oct 27	Directed Trust Company	CA	Jul 4	–	–
Oct 27	Baker & McKenzie LLP	CA	Aug 14	–	–
Oct 27	Tradier Brokerage Inc.	CA	Aug 28	–	–
Oct 27	Indico Data Solutions	CA	May 5	–	–
Oct 26	USForex Inc.	CA	Sep 28	–	–
Oct 26	Frontline Education	CA	Aug 14	–	–
Oct 23	Navigate 360, LLC	CA	Nov 21, 2025	–	–
Oct 23	Apollo Management Holdings, L.P.	CA	Jul 6	–	–
Oct 22	Dill Dill Carr Stonbraker & Hutchings, P.C.	CA	Oct 22, 2025	–	–
Oct 22	Deposition Solutions, LLC (d/b/a Lexitas)	CA	Sep 1, 2019	–	–
Oct 22	Opportune LLP	CA	Jun 22	–	–
Oct 22	BASS Medical Group	CA	Sep 4	–	–
Oct 21	Dorsata, Inc.	CA	Aug 10	–	–
Oct 21	Aldrich Services LLP	OR	Aug 22	3,202	–
Oct 21	Photon Health	OR	Aug 9	521	–
Oct 20	Toyo Tire Holdings of Americas Inc.	CA	Jan 6	–	–
Oct 20	Mercadien, P.C. CPAs	CA	Sep 17, 2025	–	–
Oct 19	Roseburg Therapy dba Stronger Oregon	OR	Jan 1, 2001	1	–
Oct 19	STS Aviation Group	CA	Aug 5, 2025	–	–
Oct 19	Alma Family Services	CA	Jul 9	–	–
Oct 19	Citizens Bank	CA	Sep 10	–	–
Oct 18	Stitch Connect Inc	CA	Sep 18	–	–
Oct 16	Frazer LLP	CA	Mar 25, 2025	–	–
Oct 16	CDE	CA	May 22	–	–
Oct 16	Neuro Wellness Spa	CA	Aug 24	–	–
Oct 16	Covered California	CA	May 13	–	–
Oct 16	John G. Yphantides, a Professional Law Corporation	CA	–	–	–
Oct 16	Inner City Education Foundation	CA	Aug 4, 2024	–	–
Oct 15	MLD Mortgage Inc. dba The Money Store	CA	Sep 8	–	–
Oct 15	City of Foster City	CA	Feb 28	–	–
Oct 14	Kern County Superintendent of Schools	CA	Aug 14	–	–
Oct 14	BDG Law Group	CA	Sep 11, 2025	–	–
Oct 13	The City of Mt. Angel	OR	Aug 25	471	–
Oct 13	Tulare Joint Union High School District	CA	–	–	–
Oct 13	JM Bullion, Inc.	CA	Apr 12	–	–
Oct 13	American Board of Preventive Medicine	CA	Mar 8	–	–
Oct 13	JM Bullion, Inc. (Silver.com, ProvidentMetals.com)	WA	Apr 12	2,366	Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth
Oct 13	Porter and Company	CA	Aug 30	–	–
Oct 13	Magna Hospitality Group	CA	May 22, 2025	–	–
Oct 13	DriveWealth, LLC	WA	Sep 4	358,104	Name; Social Security Number; Financial & Banking Information; Full Date of Birth
Oct 12	Mercadien P.C., CPAs	OR	Sep 17, 2025	–	–
Oct 12	Mercadien, P.C. CPAs	CA	–	–	–
Oct 10	Blueberry Pediatrics	CA	Aug 9	–	–
Oct 10	Blueberry Pediatrics	OR	Aug 10	340,915	–

How this tracker works

Every state requires organizations to notify residents of breaches of personal information, and some also require a copy of the notice to the attorney general, who publishes it. We read the public lists of California, Washington and Oregon twice a day and keep the last 13 months.

“Residents affected” counts only that state’s residents, not the breach’s total size. The same breach often appears in several states’ lists. A notice means an organization reported a breach; the notice itself, linked from each name where the state publishes it, explains what happened.