Search Data Security Breaches

California law requires a business or state or local agency to notify any California resident whose unencrypted personal information, as defined, was acquired, or reasonably believed to have been acquired, by an unauthorized person. (You can read the law here: California Civil Code s. 1798.29(a) for state agencies and California Civ. Code s. 1798.82(a) for businesses).

The law also requires that a sample copy of a breach notice sent to more than 500 California residents must be provided to the California Attorney General. Below is a list of those sample breach notices. (Note that in some cases the organization that sent the notice is not the one that experienced the breach. For example, a bank may notify of a credit card number breach that occurred not at the bank, but at a merchant.)

You can search by the name of the organization that sent the notice, or simply scroll through the list. To read a notice, click on the name of the organization in the list. Then click on the link titled "Sample Notification."

Download Full Data Breach List (CSV)

Organization Name Date(s) of Breach Reported Date
Forever 21, Inc. 02/15/2018, 03/23/2018 06/22/2018
Tuskegee University 09/24/2017, 03/22/2018 06/22/2018
Notre Dame de Namur University 04/23/2018 06/20/2018
Regency Theatres n/a 06/19/2018
Walgreen Co. 12/20/2017, 04/17/2018 06/19/2018
GreatBanc Trust Company 10/23/2017 06/15/2018
MyHeritage Ltd. 10/26/2017 06/15/2018
POPSUGAR Inc. 02/22/2018 06/14/2018
AAA Business Supplies 04/08/2018 06/13/2018
Denise M. Bowden, LAc 04/28/2018 06/11/2018
Manduka 02/22/2017, 03/05/2018 06/08/2018
Systeme Software, Inc. 05/07/2018 06/07/2018
Aimbridge Hospitality Holdings, LLC 01/08/2018, 03/21/2018 06/07/2018
9W Halo OpCo L.P. d/b/a Angelica 04/10/2018, 04/10/2018, 04/11/2018 06/07/2018
PLAE INC. 03/15/2018, 05/11/2018 06/04/2018
Edward D. Jones & Co, L.P. 04/21/2018 06/04/2018
City of Thousand Oaks 11/21/2017 06/04/2018
Hair Free Forever n/a 06/03/2018
Forever 21, Inc. 02/15/2018 06/01/2018
Elmcroft Senior Living, Inc. 05/10/2018, 05/11/2018, 05/12/2018 06/01/2018
Transamerica, including Transamerica Life Insurance Company and Transamerica Retirement Solutions, LLC 03/01/2017, 01/31/2018 06/01/2018
Bay Area Air Quality Management District 01/10/2018, 01/24/2018, 01/31/2018, 02/07/2018 05/25/2018
CBS Interactive, Inc. 01/01/2018, 05/16/2018 05/24/2018
California Department of Public Health 03/12/2018 05/23/2018
Golden 1 Credit Union 04/07/2018, 04/14/2018, 04/22/2018 05/22/2018
Muir Medical Group, IPA. Inc. 12/07/2017 05/22/2018
Worldwide Services Insurance Agency, LLC 10/11/2017, 10/13/2017 05/21/2018
Brinker International, Inc. 05/11/2018 05/18/2018
Bombas, LLC n/a 05/18/2018
Black Phoenix, Inc 05/01/2018 05/17/2018
Corporation Service Company 11/25/2017 05/17/2018
Sears Holdings Management Corporation 09/27/2017, 10/12/2017 05/17/2018
Providence Saint John's Health Center 11/20/2017, 12/09/2017 05/16/2018
LifeBridge Health 09/27/2016, 03/18/2018 05/15/2018
TaskRabbit, Inc. 04/11/2018 05/14/2018
San Francisco Department of Public Health ("SFDPH") 12/09/2017 05/11/2018
Capitol Administrators, Inc. 01/07/2018, 01/24/2018 05/11/2018
Farmgirl Flowers, Inc. 04/26/2018, 04/29/2018 05/11/2018
USACS Management Group, Ltd. 03/09/2018 05/08/2018
Deephaven Mortgage LLC 01/10/2018 05/08/2018
Global University 12/31/2017, 01/31/2018 05/08/2018
Rail Europe North America Inc. 11/29/2017 05/08/2018
MASON LAW OFFICE, P.C. 05/05/2018, 05/04/2018 05/05/2018
Rady Children's Hospital-San Diego 03/29/2018 05/03/2018
Hudson’s Bay Company n/a 04/27/2018
CPT Group, Inc. 12/08/2017 04/27/2018
Southwest Airlines co. 10/01/2017 04/20/2018
W.W. Grainger, Inc. 09/26/2017, 10/12/2017 04/20/2018
Center for Orthopaedic Specialists 02/18/2018, 02/25/2018, 03/04/2018 04/19/2018
AccessLex Institute d/b/a Access Group 03/23/2018 04/18/2018