The Signal Edition
Tracker · Cybersecurity

Data breaches

Breach notices that companies and other organizations must file with state attorneys general when residents’ personal information is exposed.

Updated Nov 2, 2026, 3:49 p.m. ET from California, Washington, Oregon attorneys general
Notices, last 30 days
71
California, Washington, Oregon
California, last 90 days
166
Counts not published
Washington, last 90 days
38
776,959 residents affected
Oregon, last 90 days
50
26,799,556 residents affected
Breach notices per week
Weeks start Monday, dated by when the notice was reported. The latest week may be incomplete. States: California, Washington, Oregon.

All notices, newest first

Download CSV

1,072 entries. Page 15 of 22.

ReportedOrganizationStateBreach dateResidents affectedData exposed
Feb 20Too Lost LLCCASep 2, 2025––
Feb 20SitusAMC Holdings CorporationWANov 13, 202520,587Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Military ID Number; Passport Number; Health Insurance Policy or ID Number; Medical Information
Feb 20Wellcare Health Insurance Company of Washington, Inc. (Insightin Health, Inc.)WASep 17, 2025843Name; Full Date of Birth; Health Insurance Policy or ID Number; Email Address and Password/Security Question Answers; Other
Feb 20SitusAMC Holdings CorporationORNov 13, 2025250–
Feb 20SitusAMC Holdings CorporationCANov 13, 2025––
Feb 19Choice Hotels International, Inc.ORJan 1424,115–
Feb 19TAK Broadband LLCCAAug 2, 2025––
Feb 19Choice Hotels International, Inc.CAJan 14––
Feb 19Ahtna, Inc.CAApr 20, 2025––
Feb 18North East Medical ServicesCAOct 19, 2025––
Feb 13TENGA USA INCCAFeb 12––
Feb 12TABB Inc. ("TABB")ORAug 14, 20245,309–
Feb 12TABB Inc. (“TABB”)CAAug 14, 2024––
Feb 12Fishman, Larsen & Callister, P.C.CAJun 8, 2025––
Feb 12AltaMed Health Services CorporationCANov 27, 2025––
Feb 12Nassau OOGP Vision GroupCAJan 12, 2024––
Feb 12Progress FoundationCAFeb 2––
Feb 12TABB ("TABB") (The Brooklyn Hospital Center)WAAug 14, 20243Name; Social Security Number
Feb 11TriZetto Provider SolutionsCANov 19, 2024––
Feb 11Jeff Anderson & Associates PACASep 18, 2025––
Feb 11Marquis Software Solutions (on behalf of business customer data owners)CAAug 14, 2025––
Feb 11TriZetto Provider SolutionsORNov 19, 20243,433,965–
Feb 9The City of San Jose, CaliforniaCAJan 9––
Feb 9Episource, LLCCAJan 27, 2025––
Feb 7The Phia Group, LLCORDec 1, 202540,366–
Feb 7Benton County Health ServicesORJan 1, 20011,464–
Feb 6UA Sprinkler Fitters Local 669 JATCWAMay 17, 2024518Name; Social Security Number; Driver's License or Washington ID Card Number; Medical Information
Feb 6UA Sprinkler Fitters Local 669 Joint Apprenticeship and Training CommitteeORMay 17, 202420,623–
Feb 6Vikor Scientific, LLC (Korgene, Korpath, Catalyst RCM)WANov 8, 20251,456Name; Financial & Banking Information; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information
Feb 6Vikor Scientific, LLCCANov 8, 2025––
Feb 6Chapman and Associates, PCCAJan 2, 2025––
Feb 6UA Sprinkler Fitters Local 669 Joint Apprenticeship and Training Committee (“JATC”)CAMay 17, 2024––
Feb 6TriZetto Provider SolutionsWANov 19, 202476,562Name; Social Security Number; Financial & Banking Information; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information; Other
Feb 6Vikor Scientific, LLCORNov 8, 2025139,964–
Feb 6Towne Mortgage CompanyCAJun 7, 2025––
Feb 6Phreesia, Inc.CAAug 17, 2025––
Feb 6Anywhere Real Estate Inc.CA–––
Feb 5Awes.me, Inc.CA–––
Feb 5Carter Federal Credit UnionORJun 25, 2025105,185–
Feb 4Evolve Mortgage Services on behalf of financial institutionsCASep 17, 2025––
Feb 4Gravity Payments, Inc.WAAug 12, 2025677Social Security Number; Financial & Banking Information; Full Date of Birth; Username and Password/Security Question Answers
Feb 4Edelman Financial Engines, LLCCAJan 7––
Feb 4Gain Federal Credit UnionCAOct 20, 2025––
Feb 3Bayou Media Development, LLCCASep 25, 2025––
Feb 3MedRevenu, LLCCADec 3, 2024––
Feb 1Sause Bros. Services, Inc.ORNov 5, 2025145–
Jan 31GSPlatformCo Inc.OROct 22, 2025327–
Jan 30The Phia Group (CRH Americas, Inc. F/K/A Oldcastle, Inc., PHP - Premera, PHP - Commercial, PeaceHealth)WAJul 8, 20242,802Name; Social Security Number; Driver's License or Washington ID Card Number; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information
Jan 30Wakefield & Associates, LLCCAMar 2, 2025––
Jan 30Fried, Frank, Harris, Shriver & Jacobson LLPWAOct 23, 20252,106Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Passport Number; Other

How this tracker works

Every state requires organizations to notify residents of breaches of personal information, and some also require a copy of the notice to the attorney general, who publishes it. We read the public lists of California, Washington and Oregon twice a day and keep the last 13 months.

“Residents affected” counts only that state’s residents, not the breach’s total size. The same breach often appears in several states’ lists. A notice means an organization reported a breach; the notice itself, linked from each name where the state publishes it, explains what happened.