Tracker · Cybersecurity
Data breaches
Breach notices that companies and other organizations must file with state attorneys general when residents’ personal information is exposed.
Updated Nov 2, 2026, 3:49 p.m. ET from California, Washington, Oregon attorneys general
Notices, last 30 days
71
California, Washington, Oregon
California, last 90 days
166
Counts not published
Washington, last 90 days
38
776,959 residents affected
Oregon, last 90 days
50
26,799,556 residents affected
Weeks start Monday, dated by when the notice was reported. The latest week may be incomplete. States: California, Washington, Oregon.
All notices, newest first
1,072 entries. Page 21 of 22.
| Reported | Organization | State | Breach date | Residents affected | Data exposed |
|---|---|---|---|---|---|
| Oct 30, 2025 | Berkeley Research Group, LLC | CA | Feb 28, 2025 | – | – |
| Oct 29, 2025 | Northwest Radiologists and Mt. Baker Imaging | OR | Jan 20, 2025 | 362,713 | – |
| Oct 29, 2025 | Northwest Radiologists and Mt. Baker Imaging | CA | Jan 20, 2025 | – | – |
| Oct 29, 2025 | OB-GYN Associates | CA | – | – | – |
| Oct 28, 2025 | Form Energy, Inc. | CA | Sep 16, 2025 | – | – |
| Oct 27, 2025 | RKA Consulting Group | CA | – | – | – |
| Oct 25, 2025 | Alight Solutions | CA | Sep 23, 2025 | – | – |
| Oct 24, 2025 | Conduent Business Services, LLC | CA | Oct 21, 2024 | – | – |
| Oct 24, 2025 | Vibra Hospital of Sacramento, LLC | CA | Mar 12, 2025 | – | – |
| Oct 24, 2025 | Alpha Auto Group | OR | Jun 6, 2025 | 392 | – |
| Oct 24, 2025 | Batta Fulkerson Law Group | CA | Aug 8, 2025 | – | – |
| Oct 24, 2025 | Mission City Community Network, Inc. | CA | – | – | – |
| Oct 24, 2025 | Conduent Business Services LLC | WA | Oct 21, 2024 | 87,975 | Name; Social Security Number; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information |
| Oct 24, 2025 | Conduent Business Services, LLC | OR | Oct 21, 2024 | 10,515,849 | – |
| Oct 23, 2025 | Interlaken, Inc. | OR | Dec 11, 2024 | 372 | – |
| Oct 23, 2025 | Yamhill Community Care (YCCO) | OR | Aug 29, 2025 | 1,251 | – |
| Oct 23, 2025 | Outcomes One, Inc. | CA | Jul 1, 2025 | – | – |
| Oct 23, 2025 | Michael R. Schwartz, MD, FACS | CA | Jan 20, 2025 | – | – |
| Oct 22, 2025 | Sunnyvale Elementary School District | CA | – | – | – |
| Oct 21, 2025 | Lincoln University | CA | Oct 8, 2024 | – | – |
| Oct 17, 2025 | The Evergreen State College | WA | May 21, 2025 | 7,727 | Name; Social Security Number; Full Date of Birth; Student ID Number |
| Oct 17, 2025 | Khan and Associates CPA | CA | Jul 9, 2025 | – | – |
| Oct 16, 2025 | PeopleGuru Holdings, Inc. | CA | Jul 9, 2025 | – | – |
| Oct 16, 2025 | Watsonville Community Hospital | CA | Nov 25, 2024 | – | – |
| Oct 16, 2025 | River City Eye Care, LLC | OR | Sep 8, 2025 | 6,588 | – |
| Oct 16, 2025 | PeopleGuru Holdings, Inc. | OR | Jul 6, 2025 | 80,146 | – |
| Oct 16, 2025 | PeopleGuru Holdings, Inc. | WA | Jul 6, 2025 | 1,861 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Passport Number; Health Insurance Policy or ID Number; Medical Information |
| Oct 15, 2025 | Coalesce, LLC dba Benefitelect | CA | Mar 20, 2025 | – | – |
| Oct 15, 2025 | Kadlec Clinic (Providence) | WA | Aug 19, 2025 | 992 | Name; Medical Information |
| Oct 15, 2025 | Arch Health Partners, Inc. d/b/a Palomar Health Medical Group | CA | May 5, 2024 | – | – |
| Oct 15, 2025 | International Grand Investment Corp. | OR | Sep 1, 2025 | 250 | – |
| Oct 15, 2025 | Episource, LLC | CA | Jan 27, 2025 | – | – |
| Oct 14, 2025 | Dulcich, Inc. | CA | Jun 24, 2024 | – | – |
| Oct 14, 2025 | Dulcich Inc | WA | Jun 24, 2024 | 10,761 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Passport Number; Health Insurance Policy or ID Number; Medical Information |
| Oct 14, 2025 | Dulcich, Inc. | OR | Jun 24, 2024 | 40,066 | – |
| Oct 13, 2025 | Workers Compensation Insurance Rating Bureau of California | CA | Oct 7, 2025 | – | – |
| Oct 11, 2025 | Payactiv, Inc. | CA | Apr 3, 2025 | – | – |
| Oct 11, 2025 | Payactiv, Inc. | OR | Apr 3, 2025 | 176,282 | – |
| Oct 11, 2025 | Payactiv, Inc. | WA | Apr 3, 2025 | 18,085 | Name; Social Security Number; Full Date of Birth |
| Oct 10, 2025 | Open Practice Solutions, LTD | WA | Jun 26, 2025 | 1,202 | Name; Medical Information |
| Oct 10, 2025 | Goosehead Insurance Agency, LLC | CA | Mar 6, 2025 | – | – |
| Oct 10, 2025 | SimonMed Imaging | CA | Jan 21, 2025 | – | – |
| Oct 10, 2025 | Diversity Connected | CA | Oct 10, 2025 | – | – |
| Oct 10, 2025 | Open Practice Solutions, LTD | CA | Jun 26, 2025 | – | – |
| Oct 10, 2025 | Action Property Management, Inc. | CA | Apr 6, 2025 | – | – |
| Oct 8, 2025 | Conduent Business Services, LLC | CA | Oct 21, 2024 | – | – |
| Oct 8, 2025 | Decisely Insurance Services, LLC | OR | Dec 15, 2024 | 113,984 | – |
| Oct 7, 2025 | The Institute of Culinary Education | CA | – | – | – |
| Oct 7, 2025 | Decisely Insurance Services, LLC | CA | Dec 15, 2024 | – | – |
| Oct 6, 2025 | AppFolio, Inc. | OR | Aug 8, 2025 | 72,444 | – |
How this tracker works
Every state requires organizations to notify residents of breaches of personal information, and some also require a copy of the notice to the attorney general, who publishes it. We read the public lists of California, Washington and Oregon twice a day and keep the last 13 months.
“Residents affected” counts only that state’s residents, not the breach’s total size. The same breach often appears in several states’ lists. A notice means an organization reported a breach; the notice itself, linked from each name where the state publishes it, explains what happened.