Tracker · Cybersecurity
Data breaches
Breach notices that companies and other organizations must file with state attorneys general when residents’ personal information is exposed.
Updated Nov 2, 2026, 3:49 p.m. ET from California, Washington, Oregon attorneys general
Notices, last 30 days
71
California, Washington, Oregon
California, last 90 days
166
Counts not published
Washington, last 90 days
38
776,959 residents affected
Oregon, last 90 days
50
26,799,556 residents affected
Weeks start Monday, dated by when the notice was reported. The latest week may be incomplete. States: California, Washington, Oregon.
All notices, newest first
1,072 entries. Page 14 of 22.
| Reported | Organization | State | Breach date | Residents affected | Data exposed |
|---|---|---|---|---|---|
| Mar 6 | Service Lighting, Inc. | WA | Mar 12, 2025 | 715 | Name; Financial & Banking Information |
| Mar 6 | Tyree Oil Inc | OR | Jun 28, 2025 | 4,821 | – |
| Mar 5 | Service Lighting, Inc. | CA | Mar 12, 2025 | – | – |
| Mar 5 | Insightin Health, Inc. | CA | Sep 17, 2025 | – | – |
| Mar 5 | Tieu Dental Corporation | CA | Jul 28, 2025 | – | – |
| Mar 5 | Service Lighting, Inc. | OR | Mar 12, 2025 | 25,736 | – |
| Mar 5 | Insightin Health, Inc. (Centene Corporation) | WA | Sep 17, 2025 | 11,740 | Name; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information |
| Mar 5 | Insightin Health, Inc. | OR | Sep 17, 2025 | 1,144,686 | – |
| Mar 5 | Northwest Medical Homes, LLC | WA | Mar 19, 2025 | 517 | Name; Social Security Number; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information |
| Mar 5 | Northwest Medical Homes, LLC | CA | Mar 19, 2025 | – | – |
| Mar 5 | Northwest Medical Homes, LLC | OR | Jan 1, 1 | 98,527 | – |
| Mar 4 | PIH Health, Inc. | WA | – | 3,639 | Name; Social Security Number; Driver's License or Washington ID Card Number; Health Insurance Policy or ID Number; Medical Information |
| Mar 4 | Williams Accountancy Corporation | CA | Dec 25, 2025 | – | – |
| Mar 3 | California FAIR Plan Association | CA | Dec 12, 2025 | – | – |
| Mar 3 | Brown Advisory LLC | WA | Jan 21 | 2 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Passport Number |
| Mar 3 | Children’s Council of San Francisco | CA | Aug 1, 2025 | – | – |
| Mar 3 | Clement Manor | OR | Apr 14, 2025 | 16,046 | – |
| Mar 2 | Valley Radiology Consultants Medical Group | CA | Sep 12, 2025 | – | – |
| Mar 2 | Palo Verde Hospital | CA | Mar 3, 2025 | – | – |
| Mar 1 | New American Funding | OR | Jan 1, 2001 | 359 | – |
| Feb 27 | PIH Health, Inc. | CA | Nov 14, 2024 | – | – |
| Feb 27 | Lakeside Pediatrics & Adolescent Medicine, PLLC | WA | Oct 15, 2024 | 1,314 | Name; Social Security Number; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information |
| Feb 27 | New American Funding, LLC (Figure Lending, LLC had incident) | WA | – | 699 | Name; Social Security Number; Financial & Banking Information; Full Date of Birth |
| Feb 27 | M&Y Personal Injury Lawyers | CA | Nov 22, 2025 | – | – |
| Feb 27 | Maritz Holdings Inc. | CA | Aug 10, 2025 | – | – |
| Feb 27 | New American Funding, LLC | CA | Jan 28 | – | – |
| Feb 26 | Bolt Solutions Inc. (“bolt”) | WA | – | 140,249 | Name; Full Date of Birth |
| Feb 26 | Madison Square Garden Entertainment Corp. | CA | Aug 10, 2025 | – | – |
| Feb 26 | Flash Charm, Inc. d/b/a Idera | CA | Aug 23, 2025 | – | – |
| Feb 26 | DC Professional Tax Service | CA | Feb 24 | – | – |
| Feb 26 | Jeff Anderson & Associates PA | CA | Sep 18, 2025 | – | – |
| Feb 25 | Pyramid Global Hospitality (Pyramid Advisors Limited Partnership) | WA | Aug 13, 2025 | 3,434 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Passport Number; Health Insurance Policy or ID Number; Medical Information |
| Feb 25 | Pyramid Advisors Limited Partnership d/b/a Pyramid Global Hospitality | CA | Aug 13, 2025 | – | – |
| Feb 25 | Pyramid Advisors Limited Partnership d/b/a Pyramid Global Hospitality | OR | Aug 13, 2025 | 139,899 | – |
| Feb 25 | CommonSpirit Health (Pinnacle Holdings, LTD) | WA | Nov 11, 2024 | 19,027 | Name; Full Date of Birth; Medical Information; Other |
| Feb 24 | 360training.com, Inc. (Mortgage Educators and Compliance) | WA | Jul 27, 2025 | 642 | Name; Financial & Banking Information |
| Feb 24 | Adapt Oregon Health Care | OR | Jan 1, 2001 | 2,908 | – |
| Feb 24 | 360training.com, Inc. | CA | Nov 26, 2025 | – | – |
| Feb 24 | Couve Healthcare Consulting, LLC DBA Evergreen Healthcare Group | CA | Dec 3, 2025 | – | – |
| Feb 24 | Hennessy Advisors, Inc. | CA | Mar 30, 2025 | – | – |
| Feb 23 | QualDerm Partners, LLC | OR | Dec 23, 2025 | 3,117,874 | – |
| Feb 23 | QualDerm Partners, LLC | WA | Dec 23, 2025 | 753 | Name; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information |
| Feb 23 | Figure Technology Solutions, Inc. (Figure Lending Corp, Figure Lending LLC, Figure Markets Credit LLC, Figure Payments Corporation) | WA | Jan 28 | 26,128 | Name; Social Security Number; Financial & Banking Information; Full Date of Birth; Other |
| Feb 23 | Figure Technology Solutions, Inc. on behalf of Figure Lending LLC, Figure Markets Credit LLC, and Figure Payments Corporation. | CA | Jan 28 | – | – |
| Feb 23 | QualDerm Partners, LLC | CA | Dec 23, 2025 | – | – |
| Feb 21 | Workers Compensation Insurance Rating Bureau of California | CA | Oct 9, 2025 | – | – |
| Feb 20 | Walgreen Co. | WA | Jul 14, 2025 | 2 | Name; Full Date of Birth; Medical Information; Other |
| Feb 20 | Wellcare of Washington, Inc. (Insightin Health, Inc.) | WA | Sep 17, 2025 | 2,485 | Name; Full Date of Birth; Health Insurance Policy or ID Number; Email Address and Password/Security Question Answers; Other |
| Feb 20 | Coordinated Care of Washington, Inc. (Insightin Health, Inc.) | WA | Sep 17, 2025 | 29 | Name; Full Date of Birth; Health Insurance Policy or ID Number; Email Address and Password/Security Question Answers; Other |
| Feb 20 | Condé Nast | WA | – | 1,392 | Name; Full Date of Birth |
How this tracker works
Every state requires organizations to notify residents of breaches of personal information, and some also require a copy of the notice to the attorney general, who publishes it. We read the public lists of California, Washington and Oregon twice a day and keep the last 13 months.
“Residents affected” counts only that state’s residents, not the breach’s total size. The same breach often appears in several states’ lists. A notice means an organization reported a breach; the notice itself, linked from each name where the state publishes it, explains what happened.