Search Data Security Breaches

California law requires a business or state or local agency to notify any California resident whose unencrypted personal information, as defined, was acquired, or reasonably believed to have been acquired, by an unauthorized person. (You can read the law here: California Civil Code s. 1798.29(a) for state agencies and California Civ. Code s. 1798.82(a) for businesses).

The law also requires that a sample copy of a breach notice sent to more than 500 California residents must be provided to the California Attorney General. Below is a list of those sample breach notices. (Note that in some cases the organization that sent the notice is not the one that experienced the breach. For example, a bank may notify of a credit card number breach that occurred not at the bank, but at a merchant.)

You can search by the name of the organization that sent the notice, or simply scroll through the list. To read a notice, click on the name of the organization in the list. Then click on the link titled "Sample Notification."

Download Full Data Breach List (CSV)

Organization Name Date(s) of Breach Reported Date
Caliber Home Loans, Inc. 01/18/2017 06/22/2017
Sadd Velazquez Higashi Shammaa, LLP 05/01/2017, 05/02/2017, 05/03/2017 06/20/2017
Home Point Financial Corporation n/a 06/20/2017
Torrance Memorial Medical Center 04/18/2017, 04/19/2017 06/19/2017
Occidental College 06/01/2017 06/19/2017
Bed Bath & Beyond Inc. 05/15/2017 06/19/2017
Jewelry.com, a division of Richline Group, Inc. 11/16/2016, 03/23/2017 06/17/2017
Gracenote, a Nielsen Company 05/18/2017 06/15/2017
Washington State University 04/21/2017 06/09/2017
SMH Enterprises LLC 05/30/2017 06/09/2017
Select Restaurants, Inc. 10/26/2016, 01/05/2017 06/09/2017
Northern Humboldt Union High School District 04/17/2017 06/06/2017
GameStop, Inc. 08/10/2016 06/05/2017
Freedom Smokes, Inc. 03/07/2017 06/05/2017
Signature Hardware Inc. 04/28/2017 06/02/2017
BMO Harris Bank N.A. 05/15/2017 05/31/2017
Keith M. Southwood, CPA, Inc. 03/29/2017 05/31/2017
Funding Circle USA, Inc. 04/27/2017 05/30/2017
Da Vinci Schools 04/04/2017 05/30/2017
Wiseburn Unified School District 04/04/2017 05/30/2017
FastHealth Corporation 01/14/2016, 12/20/2016 05/26/2017
Chipotle Mexican Grill, Inc. 03/24/2014, 04/18/2017 05/26/2017
Allrecipes.com, Inc. n/a 05/25/2017
Char-Broil, LLC 03/22/2017, 04/21/2017 05/25/2017
Bank of the West 02/01/2017, 04/09/2017 05/24/2017
Incipio, LLC 02/26/2016 05/23/2017
TALX Corporation, a wholly owned subsidiary of Equifax, Inc. 01/04/2016, 03/29/2017 05/23/2017
Michael T. Blevins, Inc. 03/26/2017 05/20/2017
Mt. Diablo Unified School District 04/27/2017 05/19/2017
HSX.com n/a 05/18/2017
Rite Aid Online Store, Inc. 01/30/2017, 04/11/2017 05/17/2017
Discover Financial Services 11/24/2015 05/17/2017
Equitable Tax Service 03/16/2017 05/16/2017
Nicopure Labs, LLC n/a 05/16/2017
Tatcha, LLC 01/08/2017 05/16/2017
The University of New Mexico Foundation 02/16/2017 05/15/2017
KURU Footwear 12/20/2016, 03/03/2017 05/15/2017
TripAdvisor LLC n/a 05/15/2017
Indigo Wild 04/17/2017 05/15/2017
D'Angelo & Associates, APC 03/25/2017, 03/26/2017, 03/27/2017, 03/28/2017, 03/29/2017, 03/30/2017, 03/31/2017, 04/01/2017, 04/02/2017, 04/03/2017, 04/04/2017, 04/12/2017, 04/13/2017, 04/14/2017, 04/15/2017 05/12/2017
Brooks Brothers 04/04/2016, 03/01/2017 05/12/2017
Genpact International, Inc. 01/12/2017 05/08/2017
RM Acquisition, LLC d/b/a Rand McNally 04/12/2017, 03/02/2017 05/05/2017
Agri Beef Co. 11/22/2016 05/04/2017
Zinc Auto Finance, Inc n/a 05/03/2017
MSA Accounting CPA, Professional Corp. n/a 05/02/2017
Mcdavid, Inc. 09/05/2017, 11/11/2017 05/02/2017
Palo Alto Unified School District 04/04/2017 05/01/2017
Gannett Company, Inc 03/28/2017 04/28/2017
Aptos, Inc. on behalf of Retailers in Attached Addendum n/a 04/28/2017