Search Data Security Breaches

California law requires a business or state or local agency to notify any California resident whose unencrypted personal information, as defined, was acquired, or reasonably believed to have been acquired, by an unauthorized person. (You can read the law here: California Civil Code s. 1798.29(a) for state agencies and California Civ. Code s. 1798.82(a) for businesses).

The law also requires that a sample copy of a breach notice sent to more than 500 California residents must be provided to the California Attorney General. Below is a list of those sample breach notices. (Note that in some cases the organization that sent the notice is not the one that experienced the breach. For example, a bank may notify of a credit card number breach that occurred not at the bank, but at a merchant.)

You can search by the name of the organization that sent the notice, or simply scroll through the list. To read a notice, click on the name of the organization in the list. Then click on the link titled "Sample Notification."

Download Full Data Breach List (CSV)

Organization Name Date(s) of Breach Reported Date
John D. Williamson, Certified Public Accountant 02/09/2017 02/27/2017
Aptos Inc. 02/01/2016 02/27/2017
Aptos, Inc. on behalf of Retailers in the Attached Addendum n/a 02/25/2017
Roberts Hawaii, Inc. 07/30/2017 02/24/2017
Abbott Nutrition n/a 02/24/2017
Rod's Western Palace 10/11/2016, 02/10/2017 02/24/2017
Logic Supply, Inc. 02/06/2017 02/23/2017
JoFit n/a 02/22/2017
Discover Financial Services 11/02/2014 02/20/2017
Discover Financial Services 01/02/2016 02/20/2017
Discover Financial Services 11/29/2015 02/20/2017
Intex Recreation Corp. 02/24/2016, 12/14/2016 02/20/2017
DEBOER INCOME TAX n/a 02/17/2017
Operating Engineers Local Union No. 3 02/09/2017 02/15/2017
The Honest Kitchen, Inc. 11/30/2016 02/14/2017
NEO Tech 01/27/2017 02/12/2017
CCHCS 01/23/2017 02/09/2017
The Boeing Company 11/21/2016 02/08/2017
Verity Medical Foundation 01/06/2017 02/07/2017
Platt College, Los Angeles LLC 01/17/2017 02/07/2017
Capital One n/a 02/06/2017
Nakawatase & Kaminsky, CPAs, LLP 10/31/2016, 11/01/2016, 11/05/2016, 11/08/2016 02/03/2017
Six Continents Hotels, Inc. (d/b/a InterContinental Hotels Group) 08/01/2016 02/03/2017
Renovate America, Inc. 01/20/2017 02/03/2017
Toys "R" Us-Delaware, Inc. 01/17/2017 02/02/2017
DBM Global, Inc. 01/07/2017 02/02/2017
Sunrun Inc. 01/20/2017 02/02/2017
Palomar Community College District 01/05/2017 01/30/2017
eHealthInsurance Services, Inc. 01/20/2017 01/27/2017
International Code Council 04/25/2016, 07/11/2016 01/27/2017
Synergy Specialists Medical Group, Inc. 12/05/2016, 12/06/2016, 12/07/2016, 12/08/2016, 12/09/2016 01/27/2017
Charles Komar & Sons, Inc. 03/01/2015, 12/01/2016 01/26/2017
Pool Supply Unlimited 01/09/2017 01/23/2017
Wonderful Center for Health Innovation 12/12/2016 01/20/2017
Department of Justice 10/14/2016 01/20/2017
CoPilot Provider Support Services, Inc. n/a 01/19/2017
Discover Financial Services 01/31/2016 01/18/2017
Discover Financial Services 11/18/2014 01/18/2017
Children's Hospital Los Angeles 10/18/2016 01/13/2017
Spiraledge, Inc. 05/02/2016, 11/22/2016 01/12/2017
Kevin Harrington, CPA n/a 01/09/2017
Legal Aid Society of Orange County 09/25/2016 01/06/2017
International Association of Sheet Metal, Air, Rail & Transport Workers, Sheet Metal Workers’ Local Union No. 104 10/03/2016 12/30/2016
Graphik Dimensions Ltd. 07/12/2016, 11/30/2016 12/28/2016
The Topps Company, Inc. 07/30/2016 12/27/2016
FriendFinder Networks Inc. 10/14/2016, 10/19/2016 12/23/2016
Claremont University Consortium 11/15/2016 12/22/2016
Dover Federal Credit Union 09/20/2016, 11/17/2016 12/22/2016
Western Union Financial Services, Inc., on behalf of itself and its applicable subsidiaries 07/01/2016 12/20/2016
Kaiser Foundation Hospitals 11/16/2016, 11/28/2016 12/20/2016