Search Data Security Breaches

California law requires a business or state or local agency to notify any California resident whose unencrypted personal information, as defined, was acquired, or reasonably believed to have been acquired, by an unauthorized person. (You can read the law here: California Civil Code s. 1798.29(a) for state agencies and California Civ. Code s. 1798.82(a) for businesses).

The law also requires that a sample copy of a breach notice sent to more than 500 California residents must be provided to the California Attorney General. Below is a list of those sample breach notices. (Note that in some cases the organization that sent the notice is not the one that experienced the breach. For example, a bank may notify of a credit card number breach that occurred not at the bank, but at a merchant.)

You can search by the name of the organization that sent the notice, or simply scroll through the list. To read a notice, click on the name of the organization in the list. Then click on the link titled "Sample Notification."

Download Full Data Breach List (CSV)

Organization Name Date(s) of Breach Reported Date
American Stock Transfer & Trust Company, LLC 02/01/2018 02/16/2018
California Department of Fish and Wildlife n/a 02/14/2018
Driscoll’s, Inc. 07/17/2017, 08/18/2017 02/13/2018
Sutter Health 10/11/2017, 10/12/2017 02/07/2018
PAR Electrical Contractors, Inc. 12/22/2017 02/05/2018
Ron's Pharmacy Services 10/03/2017 02/02/2018
Advanced Graphic Products, Inc. /dba/ "Advanced-Online" 04/29/2017, 01/12/2018 02/02/2018
Nevro Corporation 11/11/2017 01/29/2018
Jeffrey Born, CPA, Inc. 12/31/2017 01/26/2018
Steven Yang, D.D.S., INC. 01/06/2018 01/26/2018
National Stores, Inc. 07/16/2017, 12/11/2017 01/22/2018
Mindlance, Inc. 12/28/2017 01/19/2018
Rosewood Hotel Group 05/29/2016, 01/11/2017 01/19/2018
Corovan Corporation 09/14/2017 01/18/2018
Employer Leasing Company 09/14/2017, 09/18/2018 01/18/2018
American Golf Corporation 12/12/2017, 12/15/2017 01/18/2018
Pension Fund of the Christian Church (“Pension Fund”) 11/09/2017 01/16/2018
Guaranteed Rate, Inc. 06/09/2017, 10/02/2017 01/12/2018
Pedes Orange County 11/14/2017 01/12/2018
Deli Management, Inc. (d/b/a Jason's Deli, Inc.) 06/08/2017 01/11/2018
talentReef, Inc. 10/16/2017 01/10/2018
NHS, INC. 12/29/2017 01/10/2018
FlagShip Facility Services, Inc. 12/05/2017 01/05/2018
Rea.deeming Beauty Inc. d/b/a beautyblender 04/23/2015, 10/26/2017 01/05/2018
LiveGlam Inc. 04/25/2017 01/03/2018
Forever 21, Inc. 04/03/2017 12/28/2017
Kaiser Foundation Health Plan, Inc. 10/09/2017 12/28/2017
NextGen Global Resources 11/12/2017 12/28/2017
SAY San Diego 08/01/2017, 10/27/2017 12/28/2017
California Department of Corrections and Rehabilitation n/a 12/26/2017
Ancestry.com Operations, Inc. n/a 12/23/2017
STANFORD UNIVERSITY n/a 12/22/2017
TIO Networks USA, Inc. and its affiliates on behalf of billers in the attached schedules n/a 12/22/2017
Anaheim Majestic Garden Hotel 08/10/2016, 03/09/2017 12/22/2017
Veyna & Forschino 11/06/2017, 11/24/2017 12/21/2017
Dameron Hospital 11/17/2017 12/21/2017
Children's Hospital Los Angeles n/a 12/19/2017
Sheldon M. Golden O.D., Optometric Corporation 11/06/2017 12/19/2017
Sheldon M. Golden O.D., Optometric Corporation 11/06/2017 12/19/2017
Pinterest 11/24/2017 12/19/2017
Discover Financial Services 06/02/2016, 10/01/2017 12/18/2017
Siskiyou Joint Community College District 12/13/2017 12/15/2017
MetLife 11/09/2017 12/15/2017
U-Haul Co. of California 01/10/2017 12/12/2017
WEI Mortgage LLC 09/13/2017, 09/28/2017 12/08/2017
National Capital Poison Center (“NCPC”) 10/21/2017 12/08/2017
Rehabilitation 11/22/2017 12/07/2017
Kaiser Foundation Health Plan, Inc. 11/02/2017 12/05/2017
Hayden, Narey & Persich 07/03/2017, 07/04/2017 12/05/2017
JAM Paper & Envelope 06/15/2016, 11/06/2017 12/01/2017