Tracker · Cybersecurity
Data breaches
Breach notices that companies and other organizations must file with state attorneys general when residents’ personal information is exposed.
Updated Nov 2, 2026, 3:48 a.m. ET from California, Washington, Oregon attorneys general
Notices, last 30 days
60
California, Washington, Oregon
California, last 90 days
155
Counts not published
Washington, last 90 days
38
776,959 residents affected
Oregon, last 90 days
50
26,799,556 residents affected
Weeks start Monday, dated by when the notice was reported. The latest week may be incomplete. States: California, Washington, Oregon.
All notices, newest first
1,062 entries. Page 11 of 22.
| Reported | Organization | State | Breach date | Residents affected | Data exposed |
|---|---|---|---|---|---|
| Apr 29 | TransGlobal Insurance Agency, Inc. | CA | Feb 19 | – | – |
| Apr 28 | Access Information Management Shared Services, LLC | CA | Aug 12, 2025 | – | – |
| Apr 28 | Frontwave Credit Union | CA | Apr 3 | – | – |
| Apr 28 | JC Resorts LLC | CA | Jan 19 | – | – |
| Apr 28 | Heritage Bank | OR | Mar 2 | 182,793 | – |
| Apr 27 | L.A. Care Health Plan | CA | Jan 30 | – | – |
| Apr 27 | Conduent Business Services, LLC | CA | Jan 13, 2025 | – | – |
| Apr 24 | Texas Tech University Health Sciences Center | CA | Sep 17, 2024 | – | – |
| Apr 24 | Texas Tech University Health Sciences Center | OR | Sep 17, 2024 | 813,892 | – |
| Apr 24 | GrayRobinson P.A. | CA | Mar 5, 2025 | – | – |
| Apr 24 | Axosoft LLC dba GitKraken | WA | Mar 4 | 2 | Name; Financial & Banking Information; Email Address and Password/Security Question Answers |
| Apr 24 | Amare Global Holdings, Inc. | OR | Apr 14 | 552 | – |
| Apr 23 | Heritage Bank | WA | Feb 5 | 168,505 | Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Other |
| Apr 23 | Heritage Bank | CA | Feb 5 | – | – |
| Apr 23 | Marin Cancer Care | CA | Nov 22, 2025 | – | – |
| Apr 22 | illumifin Corporation | OR | Oct 28, 2025 | 97,781 | – |
| Apr 22 | Harbor Developmental Disabilities Foundation (d/b/a Harbor Regional Center) | CA | Mar 6 | – | – |
| Apr 21 | Sorenson, Ransom & Ferguson, LLP | OR | Sep 23, 2025 | 1,085 | – |
| Apr 21 | Cloud Imperium Games | CA | Jan 21 | – | – |
| Apr 21 | Web Hosting Hub, Inc. | CA | Apr 17, 2025 | – | – |
| Apr 20 | OneDigital Investment Advisors LLC | OR | Aug 12, 2025 | 535 | – |
| Apr 20 | Oregon Food Bank | OR | Oct 24, 2025 | 1,254 | – |
| Apr 20 | Solari Accountancy, Inc. | CA | Apr 8 | – | – |
| Apr 20 | Web Hosting Hub, Inc. | WA | Apr 17, 2025 | – | Other |
| Apr 17 | Impac Mortgage Holdings, Inc. | OR | Feb 21, 2024 | 61,066 | – |
| Apr 17 | Alaska Air Group Federal Credit Union | OR | Mar 5 | 10,705 | – |
| Apr 17 | Columbia Bank | CA | Oct 2, 2025 | – | – |
| Apr 17 | Mercer Advisors Inc. | OR | Jan 1 | 1 | – |
| Apr 17 | Nobu Restaurant Group Holding Company, LLC | CA | – | – | – |
| Apr 17 | Columbia Bank | WA | Oct 2, 2025 | 1,607 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Username and Password/Security Question Answers |
| Apr 17 | TELUS International AI Inc. | WA | Oct 18, 2025 | 9,343 | Name; Full Date of Birth; Medical Information |
| Apr 17 | Impac Mortgage Holdings, Inc. | WA | Feb 21, 2024 | 1,206 | Name; Social Security Number |
| Apr 17 | Ameriprise Financial, Inc. | WA | Mar 2 | 1,368 | Name; Social Security Number; Driver's License or Washington ID Card Number; Full Date of Birth; Other |
| Apr 17 | Alaska Air Group Federal Credit Union | CA | Mar 5 | – | – |
| Apr 17 | Colombia Bank | OR | Oct 2, 2025 | 7,067 | – |
| Apr 17 | Ameriprise Financial, Inc. | CA | Mar 2 | – | – |
| Apr 17 | Bayside Dental | WA | Jan 5 | 9,683 | Name; Social Security Number; Health Insurance Policy or ID Number; Medical Information |
| Apr 17 | Informa (including Informa Exhibitions U.S. Construction and Real Estate, Inc., other Informa U.S. entities, and Informa TechTarget) | CA | Aug 11, 2025 | – | – |
| Apr 17 | Alaska Air Group Federal Credit Union | WA | Mar 9 | 5,092 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Passport Number |
| Apr 17 | Impac Mortgage Holdings, Inc. | CA | – | – | – |
| Apr 17 | Ameriprise Financial, Inc. | OR | Mar 2 | 47,876 | – |
| Apr 16 | Panera, LLC | WA | Jan 5 | 1,564 | Name; Full Date of Birth |
| Apr 16 | Providence (Health Gorilla) | WA | Aug 30, 2024 | 838 | Name; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information |
| Apr 16 | Providence | CA | Aug 30, 2024 | – | – |
| Apr 15 | Income Property Management Co. | OR | Dec 22, 2024 | 1 | – |
| Apr 15 | DOUGLAS M SMITH & CO CPAS | CA | Jan 20 | – | – |
| Apr 15 | The Trustees of the University of Pennsylvania | WA | Oct 30, 2025 | 5,878 | Name; Full Date of Birth |
| Apr 14 | City Health, a medical corporation | CA | Mar 2 | – | – |
| Apr 14 | Pediatric Products, LLC | CA | – | – | – |
| Apr 14 | Pediatric Products, LLC | WA | Jan 27 | 4,300 | Name; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information |
How this tracker works
Every state requires organizations to notify residents of breaches of personal information, and some also require a copy of the notice to the attorney general, who publishes it. We read the public lists of California, Washington and Oregon twice a day and keep the last 13 months.
“Residents affected” counts only that state’s residents, not the breach’s total size. The same breach often appears in several states’ lists. A notice means an organization reported a breach; the notice itself, linked from each name where the state publishes it, explains what happened.