Search Data Security Breaches

California law requires a business or state or local agency to notify any California resident whose unencrypted personal information, as defined, was acquired, or reasonably believed to have been acquired, by an unauthorized person. (You can read the law here: California Civil Code s. 1798.29(a) for state agencies and California Civ. Code s. 1798.82(a) for businesses).

The law also requires that a sample copy of a breach notice sent to more than 500 California residents must be provided to the California Attorney General. Below is a list of those sample breach notices. (Note that in some cases the organization that sent the notice is not the one that experienced the breach. For example, a bank may notify of a credit card number breach that occurred not at the bank, but at a merchant.)

You can search by the name of the organization that sent the notice, or simply scroll through the list. To read a notice, click on the name of the organization in the list. Then click on the link titled "Sample Notification."

Download Full Data Breach List (CSV)

Organization Name Date(s) of Breach Reported Date
The Affiliated Group 11/20/2017 09/19/2018
Tech Rabbit LLC 02/22/2017, 05/22/2018 09/19/2018
ELS Language Services, Inc. n/a 09/18/2018
Peaceful Valley Farm & Garden Supply 02/09/2018, 08/22/2018 09/11/2018
Surgerical Specialties of Arroyo Grande, LLC, dba Oak Park Surgery Center n/a 09/10/2018
Mt. Diablo Unified School District 08/08/2018 09/07/2018
Reddit, Inc. 06/14/2018 09/04/2018
Bombas LLC 09/27/2014, 02/25/2015 08/31/2018
Port City Operating Company, doing business as St. Joseph's Medical Center n/a 08/31/2018
Movement Mortgage LLC 10/09/2017, 03/29/2018 08/31/2018
Richard Owen Nursery, Inc. d/b/a Dutch Gardens USA 09/29/2017 08/29/2018
LÍLLÉbaby 06/01/2016 08/29/2018
Dorian Business Systems, LLC n/a 08/24/2018
Cheddar's Scratch Kitchen (a concept acquired by Darden Restaurants in 2017) 11/03/2017, 01/02/2018 08/23/2018
Quality-Care Pharmacy 03/11/2018 08/22/2018
Bank of the West 03/02/2018 08/20/2018
Authentic Recovery Center, LLC 06/07/2018 08/17/2018
Animoto Inc. 07/10/2018 08/16/2018
Gordon Schanzlin New Vision Institute 10/25/2017 08/16/2018
CNG Financial Corporation, Inc. and its administrative services entity Axcess Financial Services, Inc 07/11/2018, 07/16/2018 08/15/2018
Delicato Vineyards 04/26/2018, 04/27/2018 08/14/2018
Hasbro, Inc. 09/15/2017, 11/19/2017 08/10/2018
JPMorgan Chase Bank, N.A. 06/28/2018 08/10/2018
Capital One 01/27/2017 08/09/2018
TCM Bank, N.A. (“TCM Bank”) 03/15/2017 08/06/2018
Colorado Bankers Life Insurance Company 03/28/2018, 04/13/2018 08/03/2018
Gallagher Bassett Services, Inc. n/a 08/03/2018
American Express Travel Related Services Company, Inc. 07/05/2018 08/02/2018
Compass Bank 01/01/2018, 07/01/2018 08/01/2018
Welk Resort Group, Inc. 09/29/2017, 12/13/2017 08/01/2018
Bank of Hope n/a 07/30/2018
UnityPoint Health 03/14/2018, 04/03/2018 07/30/2018
Plant Therapy 03/29/2018, 05/11/2018 07/30/2018
TradeMotion 10/13/2017 07/25/2018
Institute on Aging 05/28/2018 07/20/2018
Massive Media Match NV 11/23/2012 07/19/2018
ComplyRight, Inc. 04/20/2018, 05/22/2018 07/19/2018
Discover Financial Services 01/02/2018 07/18/2018
Tommie Copper Inc 11/10/2017, 01/21/2018 07/11/2018
MedEvolve 03/29/2018 07/10/2018
Coty, Inc. 01/12/2018 07/06/2018
The International Mission Board 02/14/2018, 04/11/2018 07/06/2018
MSK Group, P.C. 05/07/2018 07/05/2018
The Information and Referral Federation of Los Angeles County, Inc., d/b/a 211 LA County 03/14/2018, 04/23/2018 07/05/2018
Macy's, Inc 04/26/2018, 06/11/2018 07/02/2018
City of Oxnard 03/25/2018, 05/29/2018 06/29/2018
East Bay Municipal Utility District 02/05/2014 06/29/2018
Amgen, Inc. 02/21/2018 06/26/2018
Hasbro, Inc. 09/15/2017, 11/19/2017 06/25/2018
Discover Financial Services 07/16/2017 06/25/2018