Tracker · Cybersecurity
Data breaches
Breach notices that companies and other organizations must file with state attorneys general when residents’ personal information is exposed.
Updated Nov 2, 2026, 3:48 a.m. ET from California, Washington, Oregon attorneys general
Notices, last 30 days
60
California, Washington, Oregon
California, last 90 days
155
Counts not published
Washington, last 90 days
38
776,959 residents affected
Oregon, last 90 days
50
26,799,556 residents affected
Weeks start Monday, dated by when the notice was reported. The latest week may be incomplete. States: California, Washington, Oregon.
All notices, newest first
1,062 entries. Page 4 of 22.
| Reported | Organization | State | Breach date | Residents affected | Data exposed |
|---|---|---|---|---|---|
| Sep 3 | American Addiction Centers | OR | Jun 5 | 1 | – |
| Sep 2 | Knowledge Research Center | CA | Jul 8 | – | – |
| Sep 2 | Fiesta Insurance Franchise Corporation | CA | May 25 | – | – |
| Sep 2 | See’s Candies, Inc. | WA | Apr 11 | 628 | Name; Social Security Number; Driver's License or Washington ID Card Number; Full Date of Birth; Passport Number; Medical Information |
| Sep 2 | Fishbrain AB | CA | Jul 30 | – | – |
| Sep 2 | See’s Candies, Inc. | CA | Apr 11 | – | – |
| Sep 2 | YouLend US LLC | CA | Jun 5 | – | – |
| Sep 2 | HumanEdge, Inc. | CA | Mar 17 | – | – |
| Sep 1 | DeMera DeMera Cameron, LLP | CA | Mar 27 | – | – |
| Sep 1 | Kaniksu Community Health | CA | Dec 18, 2025 | – | – |
| Aug 31 | Berkeley Research Group, LLC | CA | Feb 28, 2025 | – | – |
| Aug 31 | Virta Health Corp. and Virta Medical, PC | CA | Mar 19 | – | – |
| Aug 28 | RB American Group LLC | WA | Apr 8 | 974 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Unique Private Key (e.g. used to authenticate or sign an electronic record); Student ID Number; Military ID Number; Passport Number; Health Insurance Policy or ID Number; Medical Information; Biometric Data; Username and Password/Security Question Answers; Email Address and Password/Security Question Answers; Protected Health Information owned or licensed by a HIPAA covered entity |
| Aug 28 | Bennett College | CA | – | – | – |
| Aug 28 | RB American Group LLC | OR | Apr 8 | 66,608 | – |
| Aug 27 | Indico Data Solutions | CA | May 5 | – | – |
| Aug 27 | Greystar Real Estate Partners, LLC | WA | May 1 | 905 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Other |
| Aug 27 | Integrated Specialty Coverages, LLC (“ISC”) | OR | Jun 8 | 12,844 | – |
| Aug 27 | Integrated Specialty Coverages, LLC (“ISC”) | CA | Jun 8 | – | – |
| Aug 26 | Cascade Coffee, LLC | WA | Jul 30 | 610 | Name; Social Security Number; Full Date of Birth |
| Aug 26 | Murfreesboro Medical Clinic (Aesto, LLC d/b/a Aesto Health) | WA | Dec 2, 2025 | 845 | Name; Social Security Number; Full Date of Birth; Medical Information; Other |
| Aug 26 | News Corp UK & Ireland Limited | WA | Jul 20 | 3,304 | Name; Full Date of Birth |
| Aug 26 | Murfreesboro Medical Clinic | CA | Dec 2, 2025 | – | – |
| Aug 25 | Together Women's Health LLC - Aesto | CA | Dec 2, 2025 | – | – |
| Aug 25 | Livara Health Medical Group - dba SpineZone | CA | Dec 2, 2025 | – | – |
| Aug 24 | Museum Associates d/b/a Los Angeles Museum of Art (LACMA) | CA | Jul 7, 2025 | – | – |
| Aug 24 | Pan American Group LLC | CA | Apr 8 | – | – |
| Aug 24 | Pan American Group LLC | WA | Apr 8 | 12,309 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Unique Private Key (e.g. used to authenticate or sign an electronic record); Student ID Number; Military ID Number; Passport Number; Health Insurance Policy or ID Number; Medical Information; Biometric Data; Username and Password/Security Question Answers; Email Address and Password/Security Question Answers; Protected Health Information owned or licensed by a HIPAA covered entity |
| Aug 24 | Allied Health | CA | – | – | – |
| Aug 21 | ASOS US Sales LLC | WA | Jul 28 | 1,929 | Name; Financial & Banking Information; Full Date of Birth; Email Address and Password/Security Question Answers |
| Aug 21 | Kern Psychiatric Health and Wellness Center, Inc | CA | Apr 16 | – | – |
| Aug 21 | The Health Trust and its subsidiary, FASS | CA | May 26, 2025 | – | – |
| Aug 21 | ASOS US Sales LLC | CA | Jul 28 | – | – |
| Aug 21 | POLAM Federal Credit Union | CA | May 20, 2025 | – | – |
| Aug 20 | Northern Inyo Healthcare District d/b/a Northern Inyo Hospital | CA | Dec 2, 2025 | – | – |
| Aug 20 | Southern Illinois University | CA | Sep 29, 2025 | – | – |
| Aug 20 | HUT American Group LLC | OR | Apr 8 | 135,007 | – |
| Aug 20 | Southern Illinois University | WA | Jul 10, 2025 | 552 | Name; Social Security Number; Student ID Number |
| Aug 20 | Apollo Management Holdings, L.P. | CA | Jul 6 | – | – |
| Aug 20 | Rockwood Retirement Communities (Spokane United Methodist Homes) | WA | Feb 15 | 7,136 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Passport Number; Health Insurance Policy or ID Number; Medical Information; Email Address and Password/Security Question Answers; Protected Health Information owned or licensed by a HIPAA covered entity |
| Aug 20 | Nebraska Orthopaedic Center, P.C. | CA | Dec 2, 2025 | – | – |
| Aug 19 | Nebraska Orthopaedic Center | OR | Dec 2, 2025 | 234,239 | – |
| Aug 19 | Nebraska Orthopaedic Center (Aesto, LLC) | WA | Dec 2, 2025 | 992 | Name; Social Security Number; Full Date of Birth; Medical Information |
| Aug 19 | Silver Summit Medical Corporation | CA | Nov 27, 2025 | – | – |
| Aug 18 | Turner Construction Company | OR | Jul 2 | 70,256 | – |
| Aug 18 | Apple American Group LLC and Apple American Group II, LLC | WA | Apr 8 | 20,653 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Military ID Number; Passport Number; Health Insurance Policy or ID Number; Medical Information; Biometric Data; Username and Password/Security Question Answers; Email Address and Password/Security Question Answers |
| Aug 18 | Apple American Group LLC and Apple American Group II, LLC | OR | Apr 8 | 282,573 | – |
| Aug 18 | Turner Construction Company | CA | Jul 2 | – | – |
| Aug 18 | Turner Construction Company | WA | Jul 2 | 3,401 | Name; Social Security Number; Financial & Banking Information; Full Date of Birth; Passport Number |
| Aug 18 | Apple American Group LLC and Apple American Group II, LLC | CA | Apr 8 | – | – |
How this tracker works
Every state requires organizations to notify residents of breaches of personal information, and some also require a copy of the notice to the attorney general, who publishes it. We read the public lists of California, Washington and Oregon twice a day and keep the last 13 months.
“Residents affected” counts only that state’s residents, not the breach’s total size. The same breach often appears in several states’ lists. A notice means an organization reported a breach; the notice itself, linked from each name where the state publishes it, explains what happened.