Tracker · Cybersecurity
Data breaches
Breach notices that companies and other organizations must file with state attorneys general when residents’ personal information is exposed.
Updated Nov 2, 2026, 3:48 a.m. ET from California, Washington, Oregon attorneys general
Notices, last 30 days
60
California, Washington, Oregon
California, last 90 days
155
Counts not published
Washington, last 90 days
38
776,959 residents affected
Oregon, last 90 days
50
26,799,556 residents affected
Weeks start Monday, dated by when the notice was reported. The latest week may be incomplete. States: California, Washington, Oregon.
All notices, newest first
1,062 entries. Page 7 of 22.
| Reported | Organization | State | Breach date | Residents affected | Data exposed |
|---|---|---|---|---|---|
| Jul 16 | DentaQuest LLC | CA | May 17 | – | – |
| Jul 16 | Questo | CA | Oct 1, 2025 | – | – |
| Jul 16 | Fox Rothschild LLP | WA | May 21 | 1,891 | Name; Social Security Number; Full Date of Birth |
| Jul 16 | DentaQuest, LLC | WA | May 17 | 148,300 | Name; Social Security Number; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information; Protected Health Information owned or licensed by a HIPAA covered entity |
| Jul 15 | YouLend US LLC | OR | Jun 5 | 23,105 | – |
| Jul 15 | Ernst & Young LLP | CA | Mar 28 | – | – |
| Jul 15 | Oaks Park Association | OR | May 19 | 356 | – |
| Jul 15 | YouLend US LLC | CA | Jun 5 | – | – |
| Jul 15 | Wilmer Cutler Pickering Hale and Dorr LLP | WA | May 8 | 17,253 | Name; Social Security Number; Full Date of Birth; Student ID Number |
| Jul 15 | North Coast Opportunities, Inc. / Redwood Caregiver Resource Center | CA | Jun 30 | – | – |
| Jul 14 | Madera Community Hospital | CA | May 28, 2025 | – | – |
| Jul 14 | The Washington Post | OR | Sep 29, 2025 | 323 | – |
| Jul 13 | HMC Fresh Foods, LLC | CA | Jun 5 | – | – |
| Jul 13 | Surplus Line Association of California | CA | Apr 4 | – | – |
| Jul 13 | The Washington Post (Oracle) | WA | Jul 10, 2025 | 514 | Name; Social Security Number; Financial & Banking Information; Passport Number; Health Insurance Policy or ID Number |
| Jul 13 | The Washington Post | CA | Jul 10, 2025 | – | – |
| Jul 13 | Harbor Developmental Disabilities Foundation (d/b/a Harbor Regional Center) | CA | Mar 6 | – | – |
| Jul 13 | City of Foster City | CA | Feb 28 | – | – |
| Jul 13 | Fiesta Insurance Franchise Corporation | CA | Jun 9, 2025 | – | – |
| Jul 13 | McClarty Farms LLC | CA | Jun 5 | – | – |
| Jul 13 | Cabot Packing LLC | CA | Jun 5 | – | – |
| Jul 10 | Robinson Nursery, Inc | OR | Feb 22 | 459 | – |
| Jul 10 | Wilmer Cutler Pickering Hale and Dorr LLP | CA | May 8 | – | – |
| Jul 10 | Rogue fabrication llc | OR | Jun 21 | 35,000 | – |
| Jul 9 | Frederick Goldman, Inc | WA | Jun 11 | 1 | Name; Social Security Number |
| Jul 9 | Columbia Machine, Inc. | WA | Mar 27 | 1,276 | Name; Social Security Number; Driver's License or Washington ID Card Number; Full Date of Birth; Passport Number |
| Jul 9 | Lincoln Technical Institute (Nashville Auto-Diesel College) | WA | Apr 29 | 52 | Name; Student ID Number |
| Jul 9 | Lincoln Technical Institute | CA | Apr 29 | – | – |
| Jul 8 | Alta Orthopaedics Medical Group, Inc. | CA | Feb 3 | – | – |
| Jul 8 | Vernier Science Education | OR | Jun 23 | 136 | – |
| Jul 8 | Yellow Corporation | OR | Mar 22, 2025 | 258,498 | – |
| Jul 6 | Cerner Corporation | OR | Jan 22, 2025 | 8,329 | – |
| Jul 3 | 1Life Healthcare, Inc. (One Medical, Iora Health) | WA | Jun 8 | 16,884 | Name; Social Security Number; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information; Protected Health Information owned or licensed by a HIPAA covered entity |
| Jul 2 | Child Care Resource Center | CA | Oct 4, 2016 | – | – |
| Jul 2 | Evergreen Children’s Association, dba Kids Co. | WA | Nov 11, 2025 | 511 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Passport Number; Health Insurance Policy or ID Number; Medical Information |
| Jul 2 | Lifeways, Inc. | OR | Jan 20 | 343 | – |
| Jul 2 | TriWest Healthcare Alliance | CA | Apr 17 | – | – |
| Jul 2 | Rodenburg Law Firm | CA | Aug 26, 2025 | – | – |
| Jul 2 | The Reserve Vineyards & Golf Club | OR | Apr 3 | 1,258 | – |
| Jul 2 | L.A. Care Health Plan | CA | Oct 31, 2025 | – | – |
| Jul 2 | Markel Insurance | CA | Mar 17 | – | – |
| Jun 30 | Washington Department of Social Health Services | WA | Sep 23, 2023 | 8,600 | Name; Social Security Number; Full Date of Birth; Protected Health Information owned or licensed by a HIPAA covered entity |
| Jun 30 | Glucobit, Inc. dba Reframe | WA | – | 3,181 | Name; Medical Information |
| Jun 30 | Glucobit, Inc. | OR | May 1 | 43,902 | – |
| Jun 30 | North Los Angeles County Regional Center | CA | Nov 20, 2024 | – | – |
| Jun 30 | Monmouth University | CA | Feb 5 | – | – |
| Jun 30 | Kubota North America Corporation | CA | Mar 16 | – | – |
| Jun 30 | Glucobit Inc. | CA | May 1 | – | – |
| Jun 29 | Medtronic Inc. | CA | Apr 13 | – | – |
| Jun 29 | Medtronic Inc. | WA | Apr 13 | 64,035 | Name; Social Security Number; Full Date of Birth; Medical Information; Other |
How this tracker works
Every state requires organizations to notify residents of breaches of personal information, and some also require a copy of the notice to the attorney general, who publishes it. We read the public lists of California, Washington and Oregon twice a day and keep the last 13 months.
“Residents affected” counts only that state’s residents, not the breach’s total size. The same breach often appears in several states’ lists. A notice means an organization reported a breach; the notice itself, linked from each name where the state publishes it, explains what happened.