Search Data Security Breaches

California law requires a business or state or local agency to notify any California resident whose unencrypted personal information, as defined, was acquired, or reasonably believed to have been acquired, by an unauthorized person. (You can read the law here: California Civil Code s. 1798.29(a) for state agencies and California Civ. Code s. 1798.82(a) for businesses).

The law also requires that a sample copy of a breach notice sent to more than 500 California residents must be provided to the California Attorney General. Below is a list of those sample breach notices. (Note that in some cases the organization that sent the notice is not the one that experienced the breach. For example, a bank may notify of a credit card number breach that occurred not at the bank, but at a merchant.)

You can search by the name of the organization that sent the notice, or simply scroll through the list. To read a notice, click on the name of the organization in the list. Then click on the link titled "Sample Notification."

Download Full Data Breach List (CSV)

Organization Name Date(s) of Breach Reported Date
Worldwide Services Insurance Agency, LLC 10/11/2017, 10/13/2017 05/21/2018
Brinker International, Inc. 05/11/2018 05/18/2018
Bombas, LLC n/a 05/18/2018
Black Phoenix, Inc 05/01/2018 05/17/2018
Corporation Service Company 11/25/2017 05/17/2018
Sears Holdings Management Corporation 09/27/2017, 10/12/2017 05/17/2018
Providence Saint John's Health Center 11/20/2017, 12/09/2017 05/16/2018
LifeBridge Health 09/27/2016, 03/18/2018 05/15/2018
TaskRabbit, Inc. 04/11/2018 05/14/2018
San Francisco Department of Public Health ("SFDPH") 12/09/2017 05/11/2018
Capitol Administrators, Inc. 01/07/2018, 01/24/2018 05/11/2018
Farmgirl Flowers, Inc. 04/26/2018, 04/29/2018 05/11/2018
USACS Management Group, Ltd. 03/09/2018 05/08/2018
Deephaven Mortgage LLC 01/10/2018 05/08/2018
Global University 12/31/2017, 01/31/2018 05/08/2018
Rail Europe North America Inc. 11/29/2017 05/08/2018
MASON LAW OFFICE, P.C. 05/05/2018, 05/04/2018 05/05/2018
Rady Children's Hospital-San Diego 03/29/2018 05/03/2018
Hudson’s Bay Company n/a 04/27/2018
CPT Group, Inc. 12/08/2017 04/27/2018
Southwest Airlines co. 10/01/2017 04/20/2018
W.W. Grainger, Inc. 09/26/2017, 10/12/2017 04/20/2018
Center for Orthopaedic Specialists 02/18/2018, 02/25/2018, 03/04/2018 04/19/2018
AccessLex Institute d/b/a Access Group 03/23/2018 04/18/2018
Temp-Tations Home LLC d/b/a “Tara at Home” 08/01/2017 04/16/2018
Best Buy Co., Inc. 09/26/2017, 10/12/2017 04/13/2018
California Physicians’ Service, d/b/a Blue Shield of California 11/01/2017 04/13/2018
Inogen, Inc. 12/09/2017 04/13/2018
Delta Air Lines, Inc. 09/26/2017, 10/12/2017 04/13/2018
PF@-Com, Inc. 02/20/2018, 03/15/2018 04/13/2018
Mise En Place Restaurant Services, Inc. 03/06/2018, 03/15/2018 04/12/2018
Walker Advertising, LLC 01/29/2018 04/09/2018
CA Dept. Developmental Services 02/11/2018 04/06/2018
Blue Beacon International 01/29/2018, 03/15/2018 04/06/2018
Dollar Shave Club, Inc. 03/21/2018 04/04/2018
City of Thousand Oaks 01/04/2018 04/03/2018
Autism Learning Partners Holdings, LLC 03/15/2018 04/03/2018
Sonoma County Indian Health Project, Inc. 03/08/2018 04/02/2018
Santa Cruz Biotechnology, Inc. 12/17/2017 03/30/2018
Funding Circle 06/01/2017 03/30/2018
Milligan Chiropractic Group, Inc. d/b/a Del Mar Chiropractic Sports Group 01/31/2018 03/30/2018
Thermo Fisher Scientific Inc. n/a 03/30/2018
Under Armour, Inc. n/a 03/29/2018
Mendes & Haney, LLP 01/23/2018, 02/26/2018 03/29/2018
Fred Usinger, Inc. 09/24/2017 03/28/2018
Shutterfly, Inc. 01/11/2018 03/28/2018
Applied Plan Administrators ("APA"), a division of The Retirement Advantage, Inc. ("TRA") 02/10/2018 03/28/2018
Manduka 02/22/2017, 03/05/2018 03/27/2018
The Prudential Insurance Company of America 11/09/2017 03/27/2018
Paycor, Inc. 02/16/2018 03/26/2018