Tracker · Cybersecurity
Data breaches
Breach notices that companies and other organizations must file with state attorneys general when residents’ personal information is exposed.
Updated Nov 2, 2026, 3:48 a.m. ET from California, Washington, Oregon attorneys general
Notices, last 30 days
60
California, Washington, Oregon
California, last 90 days
155
Counts not published
Washington, last 90 days
38
776,959 residents affected
Oregon, last 90 days
50
26,799,556 residents affected
Weeks start Monday, dated by when the notice was reported. The latest week may be incomplete. States: California, Washington, Oregon.
All notices, newest first
1,062 entries. Page 9 of 22.
| Reported | Organization | State | Breach date | Residents affected | Data exposed |
|---|---|---|---|---|---|
| Jun 5 | Towerpoint Wealth, LLC | CA | Apr 24 | – | – |
| Jun 3 | Texas Capital | OR | Apr 26 | 2,469 | – |
| Jun 2 | WellPoint (Independent Clinics of Washington, Elevance Health) | WA | Jun 24, 2025 | 12,017 | Name; Social Security Number; Driver's License or Washington ID Card Number; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information |
| Jun 1 | Mariner Wealth Advisors, LLC | CA | Nov 21, 2025 | – | – |
| Jun 1 | Strategic Education Inc. | WA | Feb 23 | 14,112 | Name; Social Security Number; Driver's License or Washington ID Card Number; Passport Number |
| Jun 1 | Mariner Wealth Advisors, LLC | WA | Nov 21, 2025 | 771 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth |
| Jun 1 | Strategic Education Inc. | CA | Feb 23 | – | – |
| Jun 1 | Fong, Ko & Associates LLP | CA | Jun 2, 2025 | – | – |
| Jun 1 | Industrial Acceptance Corporation | WA | Feb 22, 2025 | 679 | Name; Social Security Number; Full Date of Birth |
| Jun 1 | Strategic Education Inc. | OR | Feb 23 | 1,513,518 | – |
| May 31 | Morning Star Tours | CA | Apr 22 | – | – |
| May 31 | Morning Star Tours | WA | Apr 22 | 500 | Name; Full Date of Birth; Passport Number |
| May 31 | Morning Star Tours | OR | Apr 22 | 18,997 | – |
| May 29 | Educational Employees Credit Union | CA | Dec 15, 2025 | – | – |
| May 29 | Networking Technology, Inc. | CA | Mar 1 | – | – |
| May 29 | Lakewood School District | WA | Mar 19 | 2,184 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information |
| May 29 | IMA Diligence Services, LLC | OR | Dec 8, 2025 | 525,306 | – |
| May 29 | IMA Diligence Services, LLC | CA | Dec 8, 2025 | – | – |
| May 29 | Networking Technology, Inc. | OR | Mar 1 | 7,794 | – |
| May 29 | Networking Technology, INC. (RXNT) | WA | May 1 | 1,215 | Name; Social Security Number; Full Date of Birth; Medical Information; Protected Health Information owned or licensed by a HIPAA covered entity |
| May 29 | Eastern Washington University | WA | Apr 29 | – | Student ID Number |
| May 29 | IMA Diligence Services, LLC | WA | Dec 8, 2025 | 1,977 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information |
| May 29 | Texollini, Inc. | CA | Feb 16 | – | – |
| May 29 | Fulcrum Real Estate Services, Inc. | WA | – | 1,360 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Health Insurance Policy or ID Number; Medical Information |
| May 29 | Networking Technology, Inc. (RXNT) | WA | Mar 1 | 5,671 | Name; Social Security Number; Full Date of Birth; Medical Information |
| May 29 | Zalaznik & Associates, PLLC | WA | Sep 22, 2025 | 685 | Name; Social Security Number; Financial & Banking Information |
| May 29 | RCI Internet Services | CA | Mar 23 | – | – |
| May 28 | Harbor Developmental Disabilities Foundation (d/b/a Harbor Regional Center) | CA | Mar 6 | – | – |
| May 28 | La Perouse LLC | CA | May 27, 2025 | – | – |
| May 28 | Johnson-Peltier Electric, Inc. | CA | Mar 10 | – | – |
| May 28 | Industrial Acceptance Corporation | CA | Feb 22, 2025 | – | – |
| May 28 | Texas Capital | WA | Apr 26 | 5,134 | Name; Social Security Number; Full Date of Birth |
| May 28 | Blue Teal Holdings, LLC | CA | Oct 13, 2025 | – | – |
| May 28 | Texas Capital | CA | Apr 26 | – | – |
| May 28 | Smith & James, CPAs | CA | Mar 5 | – | – |
| May 27 | Ampex Data Systems Corporation | CA | Mar 21 | – | – |
| May 27 | Carnival Corporation | OR | Apr 10 | 5,995,277 | – |
| May 27 | Cardinal Services, Inc. | OR | Jun 30, 2025 | 128,551 | – |
| May 27 | Carnival Corporation | CA | Apr 10 | – | – |
| May 27 | Carnival Corporation | WA | Apr 10 | 54,960 | Name; Driver's License or Washington ID Card Number; Full Date of Birth; Passport Number |
| May 27 | International Grand Investment Corp. | OR | Sep 1, 2025 | 1,128 | – |
| May 26 | University of St. Thomas-Houston | WA | Jul 25, 2025 | 516 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Student ID Number; Passport Number; Medical Information; Username and Password/Security Question Answers |
| May 26 | ERMI LLC | CA | Feb 15, 2025 | – | – |
| May 26 | Interstate Management Company, LLC | CA | Nov 19, 2025 | – | – |
| May 26 | Nickey Kehoe | CA | Mar 29 | – | – |
| May 26 | Spokane Digestive Disease Center, P.S. | WA | Jan 22 | 2,093 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Medical Information |
| May 22 | Sacramento County | CA | Oct 29, 2025 | – | – |
| May 22 | Gastro Health | WA | Feb 24 | 1,813 | Name; Social Security Number; Driver's License or Washington ID Card Number; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information; Protected Health Information owned or licensed by a HIPAA covered entity |
| May 21 | Barnhart Crane & Rigging Company, Inc. | WA | Apr 23, 2025 | 1,068 | Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Passport Number; Health Insurance Policy or ID Number; Medical Information |
| May 21 | Cambia Health Solutions, Inc. | OR | Jan 1 | 2,856 | – |
How this tracker works
Every state requires organizations to notify residents of breaches of personal information, and some also require a copy of the notice to the attorney general, who publishes it. We read the public lists of California, Washington and Oregon twice a day and keep the last 13 months.
“Residents affected” counts only that state’s residents, not the breach’s total size. The same breach often appears in several states’ lists. A notice means an organization reported a breach; the notice itself, linked from each name where the state publishes it, explains what happened.