The Signal Edition
Tracker · Cybersecurity

Data breaches

Breach notices that companies and other organizations must file with state attorneys general when residents’ personal information is exposed.

Updated Nov 2, 2026, 3:48 a.m. ET from California, Washington, Oregon attorneys general
Notices, last 30 days
60
California, Washington, Oregon
California, last 90 days
155
Counts not published
Washington, last 90 days
38
776,959 residents affected
Oregon, last 90 days
50
26,799,556 residents affected
Breach notices per week
Weeks start Monday, dated by when the notice was reported. The latest week may be incomplete. States: California, Washington, Oregon.

All notices, newest first

Download CSV

1,062 entries. Page 12 of 22.

ReportedOrganizationStateBreach dateResidents affectedData exposed
Apr 14Community Psychiatry Management, LLC d/b/a Mindpath HealthCANov 25, 2024––
Apr 10BUENA VISTA MANAGEMENT SERVICES, LLC DBA Windward Life CareCADec 8, 2025––
Apr 10David Evans Enterprises, Inc.ORFeb 268,915–
Apr 10David Evans Enterprises, Inc.CAFeb 26––
Apr 10David Evans Enterprises, Inc.WAFeb 262,268Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information
Apr 10Kloeckner Metals CorporationCAFeb 17––
Apr 9Texas Tech University Health Sciences CenterWASep 17, 2024511Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information
Apr 9CardioFit Medical Group, Inc.CAJan 8––
Apr 8OneDigital Investment Advisors LLCCAAug 12, 2025––
Apr 8Wonderland Child and Family ServicesWAMay 31, 20231,282Name; Full Date of Birth; Medical Information
Apr 8TEXCAZ Insurance ServicesCAFeb 22––
Apr 8DermCare ManagementCAFeb 14, 2025––
Apr 8OneDigital Investment Advisors LLCWAAug 12, 2025565Name; Social Security Number; Financial & Banking Information; Full Date of Birth; Username and Password/Security Question Answers
Apr 8DermCare ManagementWAFeb 14, 2025522Name; Social Security Number; Driver's License or Washington ID Card Number; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information
Apr 8TruView BSI, LLCCAJul 18, 2024––
Apr 6Option Care Health, Inc.CAFeb 6––
Apr 3DocketWiseCA–––
Apr 3DocketWiseWASep 1, 2025689Name; Social Security Number; Driver's License or Washington ID Card Number; Full Date of Birth; Passport Number; Medical Information
Apr 3Maritz Holdings IncCAAug 10, 2025––
Apr 3Wynn Resorts, LimitedCAOct 5, 2025––
Apr 3Rainier Clinical Research CenterWAJan 15650Name; Social Security Number; Driver's License or Washington ID Card Number
Apr 3SitusAMC Holdings CorporationCANov 13, 2025––
Apr 2Hims & Hers, Inc.CAFeb 4––
Apr 2TIMEC Oil & Gas, Inc.CA–––
Apr 1CHP 11-99 FoundationCASep 16, 2025––
Apr 1Insightin Health, Inc.CA–––
Mar 31Mercer Advisors Inc.WAJan 227,470Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Passport Number; Username and Password/Security Question Answers; Email Address and Password/Security Question Answers; Other
Mar 31Drivestream, Inc.ORDec 4, 202491,108–
Mar 31Mercer Advisors Inc.CAJan 22––
Mar 31WhitepagesCAMar 24––
Mar 31Advantage Media Services LLCCASep 8, 2025––
Mar 31Elephants Food Group, Inc.ORJan 252,963–
Mar 31illumifin CorporationCANov 4, 2025––
Mar 29Advantage GoldCASep 5, 2025––
Mar 27Betterment LLCWAJan 92,750Name; Full Date of Birth
Mar 27OpenLoop Health Inc.WAJan 719,980Name; Financial & Banking Information; Full Date of Birth; Medical Information
Mar 27Oklahoma Tax CommissionCAJul 5, 2024––
Mar 27Eurail B.V.WADec 24, 20251,988Name; Full Date of Birth; Passport Number
Mar 27Eurail B.V.CADec 24, 2025––
Mar 27Eurail B.V.ORDec 24, 2025308,777–
Mar 26California Online Public SchoolsCA–––
Mar 26Alliance Industrial Refrigeration Services, Inc.CADec 25, 2025––
Mar 26MXB Battery Operations LPCANov 11, 2025––
Mar 26Nephrology Associates Medical GroupCAMay 19, 2025––
Mar 25Cetera Financial GroupCAJul 7, 2025––
Mar 25Deschutes Public LibraryORDec 10, 2025830–
Mar 25Dubroff, Easley, & Lovell, LLPCASep 2, 2025––
Mar 24Conduent Business Services, LLCCAOct 21, 2024––
Mar 23Chapel Hill Presbyterian ChurchWAFeb 26879Name; Social Security Number; Driver's License or Washington ID Card Number; Full Date of Birth; Passport Number
Mar 23Coalesce, LLC dba BenefitelectCAMar 30, 2025––

How this tracker works

Every state requires organizations to notify residents of breaches of personal information, and some also require a copy of the notice to the attorney general, who publishes it. We read the public lists of California, Washington and Oregon twice a day and keep the last 13 months.

“Residents affected” counts only that state’s residents, not the breach’s total size. The same breach often appears in several states’ lists. A notice means an organization reported a breach; the notice itself, linked from each name where the state publishes it, explains what happened.