Search Data Security Breaches

California law requires a business or state or local agency to notify any California resident whose unencrypted personal information, as defined, was acquired, or reasonably believed to have been acquired, by an unauthorized person. (You can read the law here: California Civil Code s. 1798.29(a) for state agencies and California Civ. Code s. 1798.82(a) for businesses).

The law also requires that a sample copy of a breach notice sent to more than 500 California residents must be provided to the California Attorney General. Below is a list of those sample breach notices. (Note that in some cases the organization that sent the notice is not the one that experienced the breach. For example, a bank may notify of a credit card number breach that occurred not at the bank, but at a merchant.)

You can search by the name of the organization that sent the notice, or simply scroll through the list. To read a notice, click on the name of the organization in the list. Then click on the link titled "Sample Notification."

Download Full Data Breach List (CSV)

Organization Name Date(s) of Breach Reported Date
TMX Finance Corporate Services, Inc., on behalf of itself, its parent TMX Finance LLC and its affiliates, many of which operate under the brands “TitleMax,” “TitleBucks,” and “InstaLoan” (collectively, “TMX”) 12/10/2022 03/30/2023
Ara Haddadian CPA 02/15/2023 03/30/2023
Regal Medical Group, Inc. 12/01/2022, 12/02/2022 03/29/2023
Svanaco, Inc. dba Americaneagle.com 07/25/2022 03/29/2023
Crystal Bay Casino 11/27/2022 03/29/2023
Tenney and Company CPA’s 04/14/2022, 05/19/2022 03/27/2023
Oklahoma City University 07/23/2022 03/27/2023
Los Angeles Unified School District 07/31/2022, 09/03/2022 03/24/2023
NCB Management Services, Inc. 02/01/2023 03/24/2023
Department of Toxic Substances Control 03/10/2023 03/23/2023
Guidecraft, Inc. 09/21/2021, 12/30/2022 03/23/2023
1st Franklin Financial Corporation 11/17/2022, 11/18/2022 03/23/2023
US Wellness Inc. 01/31/2023 03/22/2023
Merritt Healthcare Advisors 07/30/2022, 08/25/2022 03/20/2023
Department of Health Care Services 01/09/2023 03/20/2023
Emtec, Inc. 09/07/2022, 09/08/2022, 09/09/2022, 09/10/2022, 09/11/2022, 09/12/2022, 09/13/2022, 09/14/2022 03/20/2023
Law Offices of John A. Guthrie 03/17/2023 03/17/2023
Health Plan of San Mateo 01/17/2023 03/17/2023
Cardiovascular Associates 11/28/2022, 12/05/2022 03/17/2023
UC San Diego Health 09/13/2022 03/16/2023
Jackson Lewis PC 01/07/2022 03/16/2023
Myers Power Products, Inc. 01/21/2023 03/16/2023
City of Oakland 02/06/2023, 02/09/2023 03/15/2023
The Olympic Club 03/31/2022, 04/27/2022 03/15/2023
mscripts, LLC 09/30/2016, 11/18/2022 03/14/2023
Independent Living Systems, LLC 06/30/2022 03/14/2023
AllCare Plus Pharmacy, Inc. ("AllCare") 04/14/2022 03/14/2023
Local Marketing Solutions Group, Inc. parent company of MoneyMailerUSA, Inc., “Money Mailer” 05/31/2022 03/13/2023
Spaulding McCullough & Tansil LLP 11/03/2022, 11/04/2022 03/10/2023
ZOLL Medical Corporation 01/28/2023 03/10/2023
The Housing Authority of the City of Los Angeles 01/15/2022, 12/31/2022 03/10/2023
Kiefer Aquatics 02/06/2022, 06/28/2022 03/09/2023
Merced College 10/25/2022, 11/03/2022 03/08/2023
EPIC MANAGEMENT LLC 01/24/2023 03/08/2023
The City of Modesto 01/31/2023 03/08/2023
CHSPSC, LLC 01/28/2023, 01/29/2023, 01/30/2023 03/07/2023
Nor-Cal Beverage Co., Inc. 02/03/2023 03/07/2023
Elevate Services, Inc. 03/05/2022, 03/15/2022 03/07/2023
Squishable.com, Inc. 05/26/2022 03/06/2023
Fleming, Nolen & Jez, LLP n/a 03/06/2023
Cerebral, Inc 10/12/2019, 03/01/2023 03/06/2023
Crystal Creamery, Inc. 01/13/2023, 01/14/2023 03/03/2023
Sterling Bank and Trust 01/26/2023 03/03/2023
Mendoza Income Tax 02/16/2023, 03/03/2023 03/03/2023
Saltzman & Johnson Law Corporation 03/07/2022 03/03/2023
SNP ENTERPRISES INC. 02/23/2023 03/02/2023
Vocality Community Credit Union (“VCCU”) 10/12/2022 03/02/2023
Chick-fil-A, Inc. 12/18/2022, 02/12/2023 03/02/2023
College of the Desert 06/02/2022, 07/04/2022 03/01/2023
Lincoln Families 01/17/2022, 02/11/2022 03/01/2023