Search Data Security Breaches

California law requires a business or state or local agency to notify any California resident whose unencrypted personal information, as defined, was acquired, or reasonably believed to have been acquired, by an unauthorized person. (You can read the law here: California Civil Code s. 1798.29(a) for state agencies and California Civ. Code s. 1798.82(a) for businesses).

The law also requires that a sample copy of a breach notice sent to more than 500 California residents must be provided to the California Attorney General. Below is a list of those sample breach notices. (Note that in some cases the organization that sent the notice is not the one that experienced the breach. For example, a bank may notify of a credit card number breach that occurred not at the bank, but at a merchant.)

You can search by the name of the organization that sent the notice, or simply scroll through the list. To read a notice, click on the name of the organization in the list. Then click on the link titled "Sample Notification."

Download Full Data Breach List (CSV)

Organization Name Date(s) of Breach Reported Date
Charles Krug Winery (C. Mondavi & Family) n/a 06/18/2015
Corison Winery n/a 06/18/2015
Cain Vineyard and Winery n/a 06/18/2015
University of California Irvine Medical Center 06/22/2011, 03/06/2015 06/17/2015
Peter Michael Winery 04/12/2015 06/12/2015
San Luis Obispo County Community College District 05/31/2015 06/12/2015
Rombauer Vineyards, Inc. n/a 06/11/2015
Turley Wine Cellars 04/01/2015, 04/30/2015 06/10/2015
Clif Bar Family Winery & Farm, LLC 04/01/2015 06/10/2015
ADP, LLC 04/07/2015, 05/18/2015 06/08/2015
California Physicians’ Service, d/b/a Blue Shield of California 05/09/2015 06/05/2015
Gallant Risk & Insurance Services, Inc. 04/04/2015 06/03/2015
AeroGrow International 10/15/2014, 04/27/2015 06/03/2015
The Wonderful Company LLC (formerly Roll Global LLC) 02/27/2015 06/01/2015
Green Tree Servicing, LLC 09/17/2013 06/01/2015
YP Holdings n/a 06/01/2015
U.S. HealthWorks 04/22/2015 05/29/2015
Beacon Health System 11/19/2013, 01/26/2015 05/29/2015
Sally Beauty Holdings, Inc. 03/06/2015, 04/17/2015 05/28/2015
Heartland Payroll Solutions, Inc. 02/22/2015 05/28/2015
Copart Inc. 03/31/2015 05/27/2015
American Express Travel Related Services Company, Inc and /or its Affiliates (“AXP”) n/a 05/27/2015
Blue Spring Partners, LLC 04/25/2015 05/21/2015
CareFirst BlueCross Blueshield 06/19/2014 05/20/2015
Sharon J. Jones, M.D. 03/20/2015 05/19/2015
The Pennsylvania State University, College of Engineering 09/04/2012, 07/25/2014 05/18/2015
Honig's Whistlestop Inc. 03/08/2015, 04/10/2015 05/11/2015
Longwood Management Corporation 02/11/2015 05/11/2015
American Express Travel Related Services Company, Inc and /or its Affiliates (“AXP”) n/a 05/05/2015
American Express Travel Related Services Company, Inc and /or its Affiliates (“AXP”) 11/02/2014 05/01/2015
Hard Rock Hotel & Casino 09/03/2014, 04/02/2015 04/30/2015
University of California, Berkeley 12/21/2014, 02/19/2015 04/30/2015
American Express Travel Related Services Company, Inc and /or its Affiliates (“AXP”) 12/01/2014 04/30/2015
County of Los Angeles n/a 04/29/2015
Consolidated Tribal Health Project, Inc. 04/28/2015 04/28/2015
Compass Group USA, Inc. 02/02/2015 04/27/2015
American Express Travel Related Services Company, Inc and /or its Affiliates (“AXP”) 04/14/2014 04/27/2015
International Coffee & Tea, LLC 01/27/2015 04/27/2015
Stater Bros. Markets 03/05/2015, 03/29/2015 04/24/2015
AT&T n/a 04/23/2015
Freedom Smokes, Inc. 02/11/2015 04/22/2015
Epic Foods dba Bistro Burger (Market Street) 01/04/2015 04/21/2015
Abbott Laboratories 12/01/2014 04/17/2015
American Sleep Medicine n/a 04/16/2015
Homebridge, Inc. 01/24/2015 04/13/2015
Stanislaus Surgical Hospital 04/05/2015 04/13/2015
Kellogg & Andelson Global Management n/a 04/10/2015
HSBC Finance Corporation on behalf of its subsidiaries n/a 04/10/2015
University of California, Riverside 03/13/2015 04/10/2015
Cement Masons Southern California Health and Welfare Trust Fund n/a 04/08/2015