Tracker · Cybersecurity
Data breaches
Breach notices that companies and other organizations must file with state attorneys general when residents’ personal information is exposed.
Updated Nov 2, 2026, 3:49 p.m. ET from California, Washington, Oregon attorneys general
Notices, last 30 days
71
California, Washington, Oregon
California, last 90 days
166
Counts not published
Washington, last 90 days
38
776,959 residents affected
Oregon, last 90 days
50
26,799,556 residents affected
Weeks start Monday, dated by when the notice was reported. The latest week may be incomplete. States: California, Washington, Oregon.
All notices, newest first
1,072 entries. Page 16 of 22.
| Reported | Organization | State | Breach date | Residents affected | Data exposed |
|---|---|---|---|---|---|
| Jan 30 | Conduent Business Services, LLC | CA | Oct 21, 2024 | – | – |
| Jan 30 | Fried, Frank, Harris, Shriver & Jacobson LLP | CA | Oct 23, 2025 | – | – |
| Jan 30 | The Phia Group | CA | Jul 8, 2024 | – | – |
| Jan 30 | Fried, Frank, Harris, Shriver & Jacobson LLP | OR | Oct 23, 2025 | 46,602 | – |
| Jan 28 | CFD Investments, Inc. (“CFD”) | CA | Mar 15, 2025 | – | – |
| Jan 28 | Native American Health Center | CA | – | – | – |
| Jan 28 | BestCare Treatment Services, Inc. | OR | Nov 1, 2024 | 1,668 | – |
| Jan 28 | SitusAMC Holdings Corporation | CA | Nov 12, 2025 | – | – |
| Jan 28 | City of Marina, California | CA | Aug 19, 2025 | – | – |
| Jan 27 | Title Guaranty Company of Lewis County | WA | Dec 24, 2025 | – | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth |
| Jan 27 | DH Smith Company, Inc | CA | Mar 27, 2025 | – | – |
| Jan 27 | Take One Systems | CA | Jan 25 | – | – |
| Jan 26 | SoFi Technologies, Inc. | WA | Dec 29, 2025 | 38,049 | Name; Full Date of Birth; Other |
| Jan 26 | Brown & Toland Physicians | CA | Jan 27, 2025 | – | – |
| Jan 26 | Lincoln County Public Health | OR | Oct 2, 2025 | 700 | – |
| Jan 23 | CHP 11-99 Foundation | CA | Sep 16, 2025 | – | – |
| Jan 23 | Sound Window & Door, Inc. | WA | Mar 29, 2025 | 3,024 | Name; Social Security Number; Driver's License or Washington ID Card Number; Full Date of Birth |
| Jan 23 | Neurological Associates of Washington | WA | Dec 28, 2025 | 13,500 | Name; Social Security Number; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information; Email Address and Password/Security Question Answers |
| Jan 23 | Wisner Baum LLP | OR | Oct 8, 2025 | 28,823 | – |
| Jan 23 | Wisner Baum LLP | WA | Oct 8, 2025 | 717 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Medical Information |
| Jan 23 | Wisner Baum LLP | CA | Oct 8, 2025 | – | – |
| Jan 23 | MACT Health Board Inc. | CA | Nov 12, 2025 | – | – |
| Jan 21 | Clawson Honda of Fresno | CA | Feb 27, 2025 | – | – |
| Jan 21 | Diversified Benefit Services Insurance Marketing, Inc. | CA | Aug 7, 2025 | – | – |
| Jan 20 | Winters Healthcare | CA | Oct 1, 2024 | – | – |
| Jan 20 | Petaluma Health Center | CA | – | – | – |
| Jan 20 | Trizetto (business associated of Columbia River Health) | OR | Nov 1, 2024 | 304 | – |
| Jan 17 | Southern Oregon Neurosurgery | OR | Jan 1, 2001 | 1,000 | – |
| Jan 16 | Bay Area Community Health | CA | Nov 1, 2024 | – | – |
| Jan 16 | Axis Community Health | CA | Nov 1, 2024 | – | – |
| Jan 16 | Guardian Pharmacy of Washington, LLC d/b/a Mercury Pharmacy Services | WA | Nov 12, 2025 | – | Name; Medical Information; Other |
| Jan 16 | Pillsbury Winthrop Shaw Pitman LLP | OR | Jan 1, 2001 | 1 | – |
| Jan 16 | Ingram Micro, Inc. | CA | Jul 2, 2025 | – | – |
| Jan 16 | FirstFruits Farms, LLC | WA | Sep 9, 2025 | 6,335 | Name; Social Security Number |
| Jan 16 | Santa Cruz Community Health | CA | Nov 1, 2024 | – | – |
| Jan 16 | FirstFruits Farms, LLC | OR | Sep 9, 2025 | 7,007 | – |
| Jan 16 | Insurance Office of America ("IOA") | CA | Jun 25, 2025 | – | – |
| Jan 16 | SPCorp Services, Inc. | CA | Sep 26, 2025 | – | – |
| Jan 16 | Sonoma County Department of Emergency Management | CA | Nov 26, 2025 | – | – |
| Jan 16 | OLE Health (DBA CommuniCare + OLE) | CA | – | – | – |
| Jan 16 | Indian Health Center of Santa Clara Valley | CA | Nov 1, 2024 | – | – |
| Jan 16 | Asian Americans for Community Involvement | CA | Nov 1, 2024 | – | – |
| Jan 16 | Advantage Dirt Contractors, Inc. | WA | Dec 11, 2025 | 546 | Name; Social Security Number; Driver's License or Washington ID Card Number; Full Date of Birth |
| Jan 16 | PROVAIL | WA | Jun 7, 2025 | 4,391 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Passport Number; Health Insurance Policy or ID Number; Medical Information; Biometric Data; Username and Password/Security Question Answers |
| Jan 15 | La Clinica de La Raza, Inc. | CA | Nov 4, 2024 | – | – |
| Jan 14 | LifeLong Medical Care | CA | Nov 1, 2024 | – | – |
| Jan 13 | Monroe University | CA | Dec 9, 2024 | – | – |
| Jan 13 | Gym Management Service, Inc. | CA | Jul 25, 2025 | – | – |
| Jan 13 | SAFE CREDIT UNION | CA | Dec 12, 2025 | – | – |
| Jan 12 | Chapman and Associates, PC | CA | Jan 2, 2025 | – | – |
How this tracker works
Every state requires organizations to notify residents of breaches of personal information, and some also require a copy of the notice to the attorney general, who publishes it. We read the public lists of California, Washington and Oregon twice a day and keep the last 13 months.
“Residents affected” counts only that state’s residents, not the breach’s total size. The same breach often appears in several states’ lists. A notice means an organization reported a breach; the notice itself, linked from each name where the state publishes it, explains what happened.