Search Data Security Breaches

California law requires a business or state or local agency to notify any California resident whose unencrypted personal information, as defined, was acquired, or reasonably believed to have been acquired, by an unauthorized person. (You can read the law here: California Civil Code s. 1798.29(a) for state agencies and California Civ. Code s. 1798.82(a) for businesses).

The law also requires that a sample copy of a breach notice sent to more than 500 California residents must be provided to the California Attorney General. Below is a list of those sample breach notices. (Note that in some cases the organization that sent the notice is not the one that experienced the breach. For example, a bank may notify of a credit card number breach that occurred not at the bank, but at a merchant.)

You can search by the name of the organization that sent the notice, or simply scroll through the list. To read a notice, click on the name of the organization in the list. Then click on the link titled "Sample Notification."

Download Full Data Breach List (CSV)

Organization Name Date(s) of Breach Reported Date
County of Humboldt n/a 12/01/2017
Stanford University 09/01/2016 12/01/2017
Combat Brands, LLC 07/01/2015, 10/06/2017 11/29/2017
Bulletproof 360, Inc. 10/13/2016, 10/19/2017 11/27/2017
Imgur 01/01/2014 11/24/2017
Uber Technologies, Inc. 10/13/2016, 11/15/2016 11/21/2017
Armor Games Inc. 10/24/2014, 10/24/2017 11/21/2017
Discover Financial Services 05/01/2015 11/21/2017
USA Hoist Company, Inc., Mid-American Elevator Company, Inc., and Mid-American Elevator Equipment Company, Inc. 10/17/2017 11/20/2017
Brinderson, L.P. 10/24/2017 11/17/2017
Academy of Art Unversity dba Stephens Institute 11/08/2017 11/17/2017
ClubSport San Ramon and Oakwood Athletic Club 07/31/2017 11/16/2017
Cheddar’s Casual Café, Inc. d/b/a Cheddar’s Scratch Kitchen 07/21/2017 11/15/2017
Far Niente Winery 08/21/2017 11/15/2017
CMI Marketing, Inc. d/b/a Cafe Media 01/01/2011 11/15/2017
ABM Industries Incorporated 07/07/2017 11/14/2017
Bakersfield City School District 11/09/2017 11/14/2017
Los Angeles County Department of Mental Health (LACDMH) 10/24/2017 11/13/2017
Gallagher NAC 06/18/2017, 09/19/2017 11/13/2017
Dignity Health - Mercy San Juan Medical Center 09/08/2017, 09/09/2017, 09/10/2017, 09/11/2017, 09/12/2017 11/13/2017
Gary W Janke 09/26/2017 11/09/2017
Klinger Moving Company 09/14/2017, 09/18/2017 11/09/2017
Chapman University 10/17/2017 11/08/2017
Tween Brands, Inc. n/a 11/03/2017
HumanGood 09/27/2017 11/03/2017
Kimberly-Clark Corporation 10/18/2017 11/02/2017
Home Box Office, Inc. 05/15/2017 10/30/2017
Chiorini, Hunt & Jacobs 07/01/2017, 09/27/2017 10/27/2017
The Union Labor Life Insurance Company 06/22/2017 10/27/2017
ALLIANCE FOR COLLEGE-READY PUBLIC SCHOOLS 04/04/2017 10/23/2017
Palomar Health 09/27/2017 10/20/2017
Kaiser Permanente Health Plan 09/18/2017 10/20/2017
Whole Foods Market Services, Inc. 03/10/2017 10/20/2017
Discover Financial Services 06/01/2016 10/19/2017
Discover Financial Services 04/27/2017 10/19/2017
Spark Pay Online Store 03/10/2017, 04/10/2017 10/17/2017
Pizza Hut, Inc. 10/01/2017, 10/02/2017 10/14/2017
Transamerica, including Transamerica Life Insurance Company and Transamerica Retirement Solutions, LLC 01/03/2017, 08/29/2017 10/13/2017
Hyatt Hotels Corporation 03/18/2017, 07/02/2017 10/12/2017
Community Family Care Medical Group IPA, Inc 02/29/2016, 07/13/2016 10/12/2017
Droege Computing Servi ces 09/26/2017 10/11/2017
Kayser-Roth Corporation 07/01/2017, 08/09/2017 10/09/2017
Provo Craft & Novelty, Inc., d/b/a/ Cricut 05/27/2017 10/06/2017
Catholic United Financial 11/12/2016 10/06/2017
Tommie Copper Inc. 04/25/2017, 08/29/2017 10/06/2017
SyncHR, Inc. 08/23/2017 10/06/2017
SONIC Corp. n/a 10/05/2017
Avanti Markets Inc. 07/04/2017 10/05/2017
Cabrillo Community College District 09/04/2017 10/05/2017
FlexShopper, LLC 08/25/2017, 08/30/2017 10/03/2017