Search Data Security Breaches

California law requires a business or state or local agency to notify any California resident whose unencrypted personal information, as defined, was acquired, or reasonably believed to have been acquired, by an unauthorized person. (You can read the law here: California Civil Code s. 1798.29(a) for state agencies and California Civ. Code s. 1798.82(a) for businesses).

The law also requires that a sample copy of a breach notice sent to more than 500 California residents must be provided to the California Attorney General. Below is a list of those sample breach notices. (Note that in some cases the organization that sent the notice is not the one that experienced the breach. For example, a bank may notify of a credit card number breach that occurred not at the bank, but at a merchant.)

You can search by the name of the organization that sent the notice, or simply scroll through the list. To read a notice, click on the name of the organization in the list. Then click on the link titled "Sample Notification."

Download Full Data Breach List (CSV)

Organization Name Date(s) of Breach Reported Date
California Department of Motor Vehicle (CA DMV) 09/28/2015 11/06/2015
Community Catalysts of California 08/31/2015 10/16/2015
Molina Healthcare of California, Inc. 03/26/2015 09/18/2015
University of California at Los Angeles 07/03/2015 09/01/2015
California Department of Corrections and Rehabilitation n/a 07/13/2015
University of California Irvine Medical Center 06/22/2011, 03/06/2015 06/17/2015
California Physicians’ Service, d/b/a Blue Shield of California 05/09/2015 06/05/2015
University of California, Berkeley 12/21/2014, 02/19/2015 04/30/2015
University of California, Riverside 03/13/2015 04/10/2015
Cement Masons Southern California Health and Welfare Trust Fund n/a 04/08/2015
California Department of Business Oversight 01/05/2015 04/02/2015
California Pacific Medical Center 10/15/2013, 10/15/2014 01/23/2015
University of California, Berkeley 09/16/2014 12/12/2014
University of California Davis Medical Center 09/25/2014 10/13/2014
International Dairy Queen, Inc. (“IDQ”) on behalf of 9 Dairy Queen franchise locations in California listed in the attached addendum. n/a 10/09/2014
Pacific Biosciences of California, Inc. 09/16/2014 09/25/2014
California State University, East Bay 08/23/2013 09/05/2014
University of California Santa Barbara 11/01/2013 08/07/2014
Blue Shield of California 02/28/2013, 03/31/2013, 04/30/2013 07/03/2014
University of California, Washington Center (UCDC) 06/07/2014 06/20/2014
University of California Irvine 02/14/2014, 03/13/2014, 03/22/2014, 03/27/2014 05/14/2014
California Department of Corrections and Rehabilitation 03/03/2014 04/02/2014
Blue Shield of California 12/20/2013 02/18/2014
Easter Seal Society of Superior California 12/10/2013 02/07/2014
University of California Davis Medical Center 12/13/2013 02/03/2014
University of California San Francisco 09/25/2013 11/21/2013
California Department of Public Health 08/20/2013 09/26/2013
Buckeye Check Cashing of California LLC n/a 09/17/2013
California Department of Corrections and Rehabilitation 07/26/2013 08/20/2013
California Correctional Health Care Services 06/19/2013 07/30/2013
California Department of State Hospitals 05/08/2013 05/24/2013
California Department of Public Health n/a 05/08/2013
First National Bank of Southern California 02/01/2013 02/28/2013
Sunview Vineyards of California, Inc. 12/15/2012 12/31/2012
California Department of Healthcare Services 11/05/2012 12/05/2012
California Department of Corrections and Rehabilitation 09/26/2012 11/01/2012
California Correctional Health Care Services 06/20/2012 09/13/2012
California Correctional Health Care Services (CCHCS) 06/11/2012 08/07/2012
University of Southern California n/a 06/29/2012
California Department of Public Health 05/08/2012 06/05/2012
California Department of Social Services n/a 05/11/2012
California Department of Justice / CATCH n/a 05/11/2012
State of California, Department of Child Support Services 03/12/2012 03/29/2012