Tracker · Cybersecurity
Data breaches
Breach notices that companies and other organizations must file with state attorneys general when residents’ personal information is exposed.
Updated Nov 2, 2026, 3:49 p.m. ET from California, Washington, Oregon attorneys general
Notices, last 30 days
71
California, Washington, Oregon
California, last 90 days
166
Counts not published
Washington, last 90 days
38
776,959 residents affected
Oregon, last 90 days
50
26,799,556 residents affected
Weeks start Monday, dated by when the notice was reported. The latest week may be incomplete. States: California, Washington, Oregon.
All notices, newest first
1,072 entries. Page 18 of 22.
| Reported | Organization | State | Breach date | Residents affected | Data exposed |
|---|---|---|---|---|---|
| Dec 23, 2025 | Gardner Health Services | CA | – | – | – |
| Dec 22, 2025 | Sax LLP | CA | – | – | – |
| Dec 22, 2025 | TapestryHealth | CA | Nov 6, 2024 | – | – |
| Dec 22, 2025 | University of Pennsylvania | OR | Nov 11, 2025 | 2,722 | – |
| Dec 22, 2025 | Event Rental Systems | OR | Oct 1, 2024 | 311 | – |
| Dec 22, 2025 | Butler Tax & Accounting | WA | Feb 3, 2025 | 3 | Name; Social Security Number |
| Dec 21, 2025 | University of Phoenix, Inc. | OR | Aug 13, 2025 | 3,489,274 | – |
| Dec 21, 2025 | University of Phoenix, Inc. | CA | Aug 13, 2025 | – | – |
| Dec 21, 2025 | University of Phoenix, Inc. | WA | Aug 13, 2025 | 64,796 | Name; Social Security Number; Financial & Banking Information; Full Date of Birth; Student ID Number |
| Dec 19, 2025 | Adamson Ahdoot LLP | CA | Oct 27, 2025 | – | – |
| Dec 19, 2025 | Outdoor Smart! Inc | CA | Feb 15, 2024 | – | – |
| Dec 19, 2025 | Outdoor Smart! Inc (Campfire Collective) | WA | Feb 15, 2024 | 652 | Name; Financial & Banking Information |
| Dec 19, 2025 | Drivestream, Inc. | CA | Dec 4, 2024 | – | – |
| Dec 19, 2025 | Aflac Incorporated | CA | Jun 12, 2025 | – | – |
| Dec 19, 2025 | Baker University | CA | Dec 2, 2024 | – | – |
| Dec 18, 2025 | Albertsons Companies, Inc. (Safeway, Haggen) | WA | Jul 14, 2025 | 515 | Name; Full Date of Birth |
| Dec 18, 2025 | Conifer Value-Based Care, LLC | CA | Aug 28, 2025 | – | – |
| Dec 18, 2025 | Veradigm LLC | CA | Dec 15, 2024 | – | – |
| Dec 18, 2025 | Alera Group | OR | Jul 19, 2025 | 18,159 | – |
| Dec 18, 2025 | Wakefield & Associates LLC | OR | Jan 17, 2025 | 371,577 | – |
| Dec 18, 2025 | Conduent Business Services, LLC | CA | Oct 21, 2024 | – | – |
| Dec 17, 2025 | News-Press & Gazette Company | OR | Sep 2, 2025 | 11,440 | – |
| Dec 17, 2025 | News-Press & Gazette Company | WA | Sep 2, 2025 | 47 | Name; Social Security Number; Full Date of Birth |
| Dec 17, 2025 | Lonich Patton Ehrlich Policastri | CA | Nov 15, 2025 | – | – |
| Dec 17, 2025 | News-Press & Gazette Company | CA | Sep 2, 2025 | – | – |
| Dec 17, 2025 | McIntosh Laboratory, Inc. | CA | Oct 6, 2025 | – | – |
| Dec 17, 2025 | Parexel International, LLC | CA | Aug 9, 2025 | – | – |
| Dec 16, 2025 | Friends of Family Health Center | CA | Nov 1, 2024 | – | – |
| Dec 15, 2025 | NAHGA Claim Services (PAN American Life Insurance Group, Philadelphia Insurance Company, AXIS Insurance Company, The Hartford, AIG Property Casualty, Crum & Forster, The CHUBB INA, Educational & Institutional Insurance Administrators, Inc., QBE Insurance Corporation, Aspen American Insurance Company, Arch Insurance Group, Guarantee Trust Life) | WA | Apr 8, 2025 | 1,621 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Passport Number; Health Insurance Policy or ID Number; Medical Information |
| Dec 15, 2025 | Marquis Software Solutions, Inc. | OR | Aug 14, 2025 | 13,169 | – |
| Dec 15, 2025 | LKQ Corporation | CA | Aug 9, 2025 | – | – |
| Dec 15, 2025 | Hamilton Construction Company | OR | Jun 19, 2025 | 2,667 | – |
| Dec 15, 2025 | NAHGA Claim Services | OR | Apr 8, 2025 | 181,160 | – |
| Dec 15, 2025 | NAHGA Claim Services | CA | – | – | – |
| Dec 15, 2025 | TorHoerman Law, LLC | CA | – | – | – |
| Dec 15, 2025 | Fullsteam Software Holdings LLC d/b/a Event Rental Systems | CA | Sep 16, 2025 | – | – |
| Dec 12, 2025 | James J. Lynch, MD Ltd. Dba Swift Institute | CA | Jan 28, 2025 | – | – |
| Dec 12, 2025 | Catwig LLC d/b/a Victory Disability | CA | Oct 27, 2025 | – | – |
| Dec 12, 2025 | Wedbush Securities Inc. | CA | May 17, 2025 | – | – |
| Dec 12, 2025 | Rockrose Development L.L.C. | CA | Jul 4, 2025 | – | – |
| Dec 12, 2025 | 700Credit, LLC | WA | Oct 25, 2025 | 121,828 | Name; Social Security Number; Full Date of Birth |
| Dec 12, 2025 | Donaghy Sales LLC | CA | Jul 22, 2025 | – | – |
| Dec 12, 2025 | 700Credit, LLC | CA | Oct 25, 2025 | – | – |
| Dec 12, 2025 | Lydig Construction, Inc. | WA | Jun 21, 2025 | 2,397 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Passport Number; Health Insurance Policy or ID Number; Medical Information; Biometric Data; Username and Password/Security Question Answers |
| Dec 12, 2025 | 700Credit, LLC | OR | Oct 25, 2025 | 5,836,521 | – |
| Dec 11, 2025 | Morningside | WA | – | 1,534 | Name; Social Security Number; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information |
| Dec 11, 2025 | Rain Bird Corporation | WA | Feb 11, 2025 | 1,293 | Name; Financial & Banking Information |
| Dec 11, 2025 | Wilmington Community Clinic | CA | Aug 13, 2024 | – | – |
| Dec 11, 2025 | Rain Bird Corporation | OR | Feb 5, 2025 | 24,862 | – |
| Dec 11, 2025 | Rain Bird Corporation | CA | Feb 11, 2025 | – | – |
How this tracker works
Every state requires organizations to notify residents of breaches of personal information, and some also require a copy of the notice to the attorney general, who publishes it. We read the public lists of California, Washington and Oregon twice a day and keep the last 13 months.
“Residents affected” counts only that state’s residents, not the breach’s total size. The same breach often appears in several states’ lists. A notice means an organization reported a breach; the notice itself, linked from each name where the state publishes it, explains what happened.