Search Data Security Breaches

California law requires a business or state or local agency to notify any California resident whose unencrypted personal information, as defined, was acquired, or reasonably believed to have been acquired, by an unauthorized person. (You can read the law here: California Civil Code s. 1798.29(a) for state agencies and California Civ. Code s. 1798.82(a) for businesses).

The law also requires that a sample copy of a breach notice sent to more than 500 California residents must be provided to the California Attorney General. Below is a list of those sample breach notices. (Note that in some cases the organization that sent the notice is not the one that experienced the breach. For example, a bank may notify of a credit card number breach that occurred not at the bank, but at a merchant.)

You can search by the name of the organization that sent the notice, or simply scroll through the list. To read a notice, click on the name of the organization in the list. Then click on the link titled "Sample Notification."

Download Full Data Breach List (CSV)

Organization Name Date(s) of Breach Reported Date
Marriott International n/a 10/30/2019
The Guidance Center 03/15/2019, 04/01/2019 10/30/2019
Gazelle Transportation, LLC 09/01/2019, 09/24/2019 10/29/2019
Bed Bath & Beyond Inc. 09/04/2019, 09/27/2019 10/29/2019
Auto Approve, LLC 08/28/2019, 09/19/2019 10/28/2019
BookShark LLC 08/26/2019 10/25/2019
Central Valley Regional Center 07/25/2019, 08/02/2019 10/24/2019
Kalisepell Regional Healthcare 05/24/2019 10/22/2019
Tribune Publishing Company 11/01/2018, 01/22/2019, 03/19/2019, 05/31/2019, 07/11/2019 10/18/2019
Eye Buy Direct, Inc. 09/01/2018 10/18/2019
PKF LLP 08/17/2019 10/17/2019
Nutraceutical Wellness Inc. dba Nutrafol 04/10/2019 10/16/2019
The Rodgers & Hammerstein Organization 09/09/2019 10/15/2019
Hunt Regional Medical Center 05/18/2018 10/09/2019
Telecare Corporation 07/25/2019 10/04/2019
City of Bakersfield 07/30/2019, 09/05/2019 10/04/2019
San Francisco Department of Public Health 11/14/2018, 08/07/2019 10/03/2019
McAlister’s Corporation, Moe’s Stores LLC, Schlotzsky’s Stores LLC, as well as entities that are franchisees 04/11/2019, 07/22/2019 10/02/2019
03/14/2019, 06/12/2019 10/02/2019
Drury Hotels Company, LLC 12/28/2017, 06/02/2019 10/01/2019
Zynga n/a 09/30/2019
DoorDash, Inc. 05/04/2019 09/27/2019
Kaiser Permanente 08/12/2019 09/26/2019
Jewish Community Federation 09/18/2018 09/24/2019
Amateur Athletic Union 10/01/2018, 07/02/2019 09/13/2019
Coyuchi 06/20/2019 09/11/2019
Cornerstone Building Brands, Inc. 04/01/2019, 04/02/2019 09/11/2019
Miller Kaplan Arase LLP 03/22/2019 09/11/2019
Capital One 03/22/2019, 03/23/2019 09/11/2019
Calibre CPA Group 03/11/2019, 05/07/2019 09/09/2019
CafePress Inc. 02/19/2019 09/05/2019
Andy Frain Services 05/22/2019 09/03/2019
Foxit Software n/a 09/03/2019
Carl's Golfland, Inc. 03/25/2019, 07/14/2019 08/30/2019
Creation Entertainment, Inc. 02/01/2018, 10/10/2018 08/26/2019
Eye Safety Systems, Inc. (ESS) 11/21/2017, 07/16/2019 08/22/2019
Alight Solutions LLC 09/22/2014, 10/01/2016 08/20/2019
Niche.com Inc. 07/24/2019 08/20/2019
Los Angeles Police Federal Credit Union 07/17/2019 08/19/2019
Hospice of San Joaquin 07/02/2019 08/19/2019
Marks & Associates 11/01/2019 08/14/2019
Capital One 03/22/2019, 03/23/2019 08/12/2019
StockX LLC 05/14/2019 08/09/2019
Vitagene, Inc. n/a 08/06/2019
TBI Mortgage Company n/a 08/05/2019
Jofit, LLC 01/18/2019, 05/12/2019 08/05/2019
Amarin Pharma, Inc. 05/02/2018, 06/20/2019 08/05/2019
Presbyterian Healthcare Services 05/09/2019 08/02/2019
National Baseball Hall of Fame and Museum 11/15/2018, 05/14/2019 08/02/2019
Sark Technologies LLC 09/23/2018 08/02/2019