The Signal Edition
Add as preferred source on Google
Tracker · Cybersecurity

Data breaches

Breach notices that companies and other organizations must file with state attorneys general when residents’ personal information is exposed.

Updated Nov 2, 2026, 3:49 p.m. ET from California, Washington, Oregon attorneys general
Notices, last 30 days
71
California, Washington, Oregon
California, last 90 days
166
Counts not published
Washington, last 90 days
38
776,959 residents affected
Oregon, last 90 days
50
26,799,556 residents affected
Breach notices per week
Weeks start Monday, dated by when the notice was reported. The latest week may be incomplete. States: California, Washington, Oregon.

All notices, newest first

Download CSV

1,072 entries. Page 19 of 22.

ReportedOrganizationStateBreach dateResidents affectedData exposed
Dec 11, 2025Episource, LLCORJan 27, 20256,584,876–
Dec 10, 2025CareNexa, LLC, dba Molecular Testing Labs (“MTL”)CAMar 7, 2025––
Dec 10, 2025East Bay Regional Park DistrictCASep 18, 2025––
Dec 10, 2025Workers Compensation Insurance Rating Bureau of CaliforniaCAOct 7, 2025––
Dec 10, 2025City of Puyallup (CodeRed)WA–2,620Name; Username and Password/Security Question Answers; Email Address and Password/Security Question Answers
Dec 10, 2025Jewish Family and Community Services- East BayCAOct 2, 2025––
Dec 9, 2025Commonwealth Business BankCAJan 25, 2025––
Dec 9, 2025Prosper Marketplace, Inc.CAApr 29, 2025––
Dec 9, 2025Prosper Marketplace, IncWAApr 29, 2025249,848Name; Social Security Number; Financial & Banking Information; Full Date of Birth; Other
Dec 9, 2025Prosper Marketplace, Inc.ORApr 29, 202513,076,476–
Dec 8, 2025CNHI, LLCCAApr 27, 2025––
Dec 5, 2025Housing Authority of the City of Los AngelesCAOct 7, 2024––
Dec 4, 2025Healthcare Interactive, Inc.CAJun 17, 2025––
Dec 4, 2025Anchor Computer (MacKenzie-Childs)WASep 12, 20253,275Name; Full Date of Birth
Dec 3, 2025Petco Animal Supplies Stores, Inc. (“Petco”)CAJul 7, 2025––
Dec 3, 2025Farmers Insurance Exchange, Farmers Group, Inc. (its attorney-in fact), and their subsidiaries and affiliatesCAMay 29, 2025––
Dec 3, 2025Boutin JonesCAOct 15, 2024––
Dec 2, 2025Inotiv, Inc.CAAug 5, 2025––
Dec 2, 2025Kayali & CO., P.A.ORSep 29, 20251–
Dec 2, 2025Veradigm LLCWADec 15, 2024845Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information; Other
Dec 2, 2025Marquis Software Solutions (on behalf of business customer data owners)CAAug 14, 2025––
Dec 2, 2025Veradigm LLCORDec 15, 20242,672,036–
Dec 1, 2025The University of Pennsylvania (Oracle)WAAug 9, 20256,413Name; Social Security Number; Financial & Banking Information
Dec 1, 2025The University of PennsylvaniaCAAug 9, 2025––
Nov 26, 2025Discord Inc.CASep 20, 2025––
Nov 26, 2025Industrial Credit Union of Whatcom County (Go Marquis)WA–24,526Name; Social Security Number; Financial & Banking Information; Full Date of Birth
Nov 26, 2025Marquis Software Solutions (1st Northern California Credit Union, Advantage Federal Credit Union, BayFirst National Bank, Bellwether Community Credit Union, Cape Cod Five, Community 1st Credit Union, Discovery Federal Credit Union, Energy Capital Credit Union, Founders Federal Credit Union, Gateway First Bank, Generations Federal Credit Union, Gesa Credit Union, Glendale Federal Credit Union, Interior Federal, iQ Credit Union, Jonestown Bank & Trust Co., Kemba Financial Credit Union, MemberSource Credit Union, Michigan First Credit Union, Nymeo FCU, Pasadena Federal Credit Union, Seneca Savings, Seneca Savings, Suncoast Credit Union, Texoma Community Credit Union, Time Bank, TowneBank, University Credit Union, Valley Strong Credit Union, Westerra Credit Union, Whitefish Credit Union, BluPeak Credit Union, True North FCU, Southwest Financial Federal Credit Union, Sun East Credit Union, Unidentified Entity)WAAug 14, 2025269,773Name; Social Security Number; Financial & Banking Information; Full Date of Birth
Nov 26, 2025National University of Natural MedicineORJan 1, 12,189–
Nov 26, 2025Tami J. Dunham, CPACAMay 24, 2025––
Nov 26, 2025Anchorage Neighborhood Health CenterWA–3,226Name; Social Security Number; Driver's License or Washington ID Card Number; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information
Nov 26, 2025Dubroff, Easley, & Lovell, LLPCASep 2, 2025––
Nov 24, 2025Thomas Safran and AssociatesCASep 8, 2025––
Nov 24, 2025Dartmouth CollegeWAAug 9, 20251,496Name; Social Security Number; Financial & Banking Information; Full Date of Birth
Nov 24, 2025Dartmouth CollegeORAug 9, 202598,990–
Nov 24, 2025Dartmouth CollegeCAAug 9, 2025––
Nov 24, 2025Kern Oil & Refining Co. d/b/a Kern EnergyCAAug 5, 2025––
Nov 24, 2025United Food & Commercial Workers Local No. 7CADec 10, 2024––
Nov 21, 2025The TEAM Companies, LLCCAJul 15, 2025––
Nov 21, 2025AgeRight Clinical ServicesORAug 9, 20254,897–
Nov 21, 2025Ahtna, Inc.CAApr 20, 2025––
Nov 21, 2025Marquis CompaniesORAug 9, 2025801–
Nov 21, 2025Delta Dental of VirginiaCAMar 21, 2025––
Nov 21, 2025The TEAM Companies, LLCORJul 15, 202521,936–
Nov 20, 2025Housing Authority of the City of VancouverWAOct 21, 2025736Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Military ID Number; Medical Information; Biometric Data
Nov 20, 2025Cox Enterprises, Inc.CAAug 9, 2025––
Nov 19, 2025Conduent Business Services, LLCCAOct 21, 2024––
Nov 19, 2025Anchorage Neighborhood Health CenterCAAug 24, 2025––
Nov 19, 2025California Casualty Indemnity ExchangeCASep 2, 2025––
Nov 19, 2025WEL Companies, Inc.WAJan 30, 2025978Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information
Nov 19, 2025Byzfunder NY LLCCASep 1, 2025––

How this tracker works

Every state requires organizations to notify residents of breaches of personal information, and some also require a copy of the notice to the attorney general, who publishes it. We read the public lists of California, Washington and Oregon twice a day and keep the last 13 months.

“Residents affected” counts only that state’s residents, not the breach’s total size. The same breach often appears in several states’ lists. A notice means an organization reported a breach; the notice itself, linked from each name where the state publishes it, explains what happened.