The Signal Edition
Tracker · Cybersecurity

Data breaches

Breach notices that companies and other organizations must file with state attorneys general when residents’ personal information is exposed.

Updated Nov 2, 2026, 3:48 a.m. ET from California, Washington, Oregon attorneys general
Notices, last 30 days
60
California, Washington, Oregon
California, last 90 days
155
Counts not published
Washington, last 90 days
38
776,959 residents affected
Oregon, last 90 days
50
26,799,556 residents affected
Breach notices per week
Weeks start Monday, dated by when the notice was reported. The latest week may be incomplete. States: California, Washington, Oregon.

All notices, newest first

Download CSV

1,062 entries. Page 5 of 22.

ReportedOrganizationStateBreach dateResidents affectedData exposed
Aug 17Langwasser & Company CPAsCAMay 5––
Aug 17Amgen Inc.CAJul 1––
Aug 17Merced Union High School DistrictCAAug 11, 2025––
Aug 17Forrestall CPAs LLCCADec 22, 2025––
Aug 14Lennar Mortgage, LLCORMay 26348,416–
Aug 14Baylor GeneticsCA–––
Aug 14Quantum Health, Inc.WAMay 265,909Name; Social Security Number; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information
Aug 14Lennar Mortgage, LLCWAMay 2611,417Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Military ID Number; Passport Number; Medical Information
Aug 14AdaptHealth, LLCWAJun 59,214Name; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information; Protected Health Information owned or licensed by a HIPAA covered entity
Aug 14Paylogix, LLCCANov 13, 2025––
Aug 14Quantum Health, Inc.CAMay 29––
Aug 14Paylogix, LLCORNov 13, 20251,249,201–
Aug 14AdaptHealth, LLCCAJun 5––
Aug 14Baylor GeneticsWAJun 1127,243Name; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information
Aug 14Lennar Mortgage, LLCCAMay 26––
Aug 14Paylogix, LLCWANov 13, 202528,449Name; Social Security Number; Financial & Banking Information; Full Date of Birth; Health Insurance Policy or ID Number
Aug 14Quantum Health, Inc.ORMay 29184,376–
Aug 13May Trucking CompanyORApr 13,766–
Aug 13Corporation Service CompanyCAAug 10, 2025––
Aug 13See’s Candies, Inc.CAApr 11––
Aug 13May Trucking CompanyCAJun 21––
Aug 13Terry J. Dubrow, MD, A Medical CorporationCA–––
Aug 12Universal Plant Services, LLCCAJun 8––
Aug 12Temple Adat Shalom SisterhoodCAJan 26––
Aug 11Chelan County, WAWAMay 20–Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Student ID Number; Military ID Number; Passport Number; Health Insurance Policy or ID Number; Medical Information; Username and Password/Security Question Answers; Email Address and Password/Security Question Answers
Aug 11Lennar CorporationCAMar 24––
Aug 10Kovack Financial, LLCWAAug 8, 2025657Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Passport Number; Medical Information
Aug 10Kovack Financial, LLCCAAug 8, 2025––
Aug 10Kovack Financial, LLCORAug 8, 2025109,506–
Aug 10USA DeBusk LLCCAAug 14, 2025––
Aug 7Cushman & WakefieldCAApr 21––
Aug 7Golden Opportunities And Local Support, LLCWA––Name; Full Date of Birth; Other; Protected Health Information owned or licensed by a HIPAA covered entity
Aug 7Boston Healthcare for the Homeless ProgramCAOct 31, 2025––
Aug 7American Addiction CentersCAMay 12––
Aug 7American Addiction CentersWAMay 121,155Name; Social Security Number; Health Insurance Policy or ID Number; Medical Information
Aug 6Hamill & KaplanCA–––
Aug 6Abbott Cancer DiagnosticsORJul 81–
Aug 5Robert ArshagouniCAJan 12––
Aug 5Aesto LLCORDec 2, 2025730–
Aug 5Wilmer Cutler Pickering Hale and Dorr LLPORMay 835,218–
Aug 5Station Casinos, LLCCAMar 5––
Aug 5New York City Regional Center, LLCCAMar 30––
Aug 5Aesto, LLCORDec 2, 20251–
Aug 4UCLA HealthCADec 27, 2024––
Aug 4JRK Property Holdings, Inc.ORMar 261,494–
Aug 4CareCloud, Inc.ORMar 1657,920–
Aug 4Malin + Goetz, Inc.CAMay 22––
Aug 4Eyemart Express, LLCORMay 262,638–
Aug 4Aesto, LLC (Grant County Public Hospital District #2)WADec 2, 202537,253Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Medical Information; Protected Health Information owned or licensed by a HIPAA covered entity
Aug 3CTS Journey Holdings, LLC, a Delaware limited liability company (DBA Corporate Travel Service)ORDec 3, 202537,682–

How this tracker works

Every state requires organizations to notify residents of breaches of personal information, and some also require a copy of the notice to the attorney general, who publishes it. We read the public lists of California, Washington and Oregon twice a day and keep the last 13 months.

“Residents affected” counts only that state’s residents, not the breach’s total size. The same breach often appears in several states’ lists. A notice means an organization reported a breach; the notice itself, linked from each name where the state publishes it, explains what happened.