Search Data Security Breaches

California law requires a business or state or local agency to notify any California resident whose unencrypted personal information, as defined, was acquired, or reasonably believed to have been acquired, by an unauthorized person. (You can read the law here: California Civil Code s. 1798.29(a) for state agencies and California Civ. Code s. 1798.82(a) for businesses).

The law also requires that a sample copy of a breach notice sent to more than 500 California residents must be provided to the California Attorney General. Below is a list of those sample breach notices. (Note that in some cases the organization that sent the notice is not the one that experienced the breach. For example, a bank may notify of a credit card number breach that occurred not at the bank, but at a merchant.)

You can search by the name of the organization that sent the notice, or simply scroll through the list. To read a notice, click on the name of the organization in the list. Then click on the link titled "Sample Notification."

Download Full Data Breach List (CSV)

Organization Name Date(s) of Breach Reported Date
American Express Travel Related Services Company, Inc and /or its Affiliates (“AXP”) 05/28/2013 12/12/2013
Cottage Health System n/a 12/11/2013
Stephen T. Imrie, M.D. 09/23/2013 12/10/2013
Los Angeles Gay and Lesbian Community Services Center 09/17/2013, 11/08/2013 12/10/2013
DecisionDesk, Inc. 10/28/2013 12/10/2013
Horizon Healthcare Services, Inc.,dba Horizon Blue Cross Blue Shield of New Jersey, and its affiliates 11/01/2013 12/06/2013
JPMorgan Chase Bank, N.A. n/a 12/05/2013
American Express Travel Related Services Company, Inc and /or its Affiliates (“AXP”) 02/10/2013 12/04/2013
B&G Foods, Inc. 11/16/2013 12/03/2013
Maricopa County Community Colleges District n/a 12/02/2013
Board of Barbering and Cosmetology 08/23/2013 12/02/2013
Marsh & McLennan Companies, Inc. and our affiliates 06/13/2013 11/26/2013
Kaiser Foundation Hospital Orange County, Anaheim Medical Center 09/25/2013 11/25/2013
Sebastopol Sea Serpents 10/13/2013 11/25/2013
Employment Development Dept. 09/14/2013, 10/09/2013 11/22/2013
University of California San Francisco 09/25/2013 11/21/2013
Flamingo Resort and Spa n/a 11/21/2013
Kroll Background America, Inc. n/a 11/21/2013
Anthem Blue Cross 10/23/2013, 10/24/2013 11/20/2013
Kathleen E. Whisman MD n/a 11/20/2013
Discover Financial Services n/a 11/18/2013
Lincoln Credit Center 10/20/2013 11/15/2013
USI Insurance Services LLC 10/02/2013 11/13/2013
Datapak Services Corporation 03/05/2013 11/08/2013
DaVita, a division of DaVita HealthCare Partners Inc. 09/06/2013 11/05/2013
Standard Insurance Company n/a 11/04/2013
Harbor Freight Tools USA, Inc. 05/06/2013, 06/30/2013 10/31/2013
Dun & Bradstreet 04/02/2013 10/28/2013
Yusen Logistics (Americas) Inc. 09/24/2013 10/25/2013
International SOS Assistance, Inc 08/24/2013 10/25/2013
The Fisherman's Restaurant 05/03/2013 10/23/2013
AHMC Healthcare, Inc and affiliated hospitals 10/12/2013 10/21/2013
Ouidad 06/30/2013 10/18/2013
Discover Financial Services n/a 10/17/2013
Monterey County Department of Social Services 03/17/2013 10/11/2013
Legal Aid Society of San Mateo County 08/12/2013 10/11/2013
KEARNY MESA INFINITI n/a 10/10/2013
Massachusetts Mutual Life Insurance Company 09/13/2013 10/04/2013
Adobe Systems Incorporated 09/11/2013, 09/12/2013, 09/13/2013, 09/14/2013, 09/15/2013, 09/16/2013, 09/17/2013 10/03/2013
UCSF Medical Center 09/09/2013 10/02/2013
R.T. Jones Capital Management Equities 07/22/2013 10/01/2013
Petrochem Insulation, Inc. 07/18/2013 10/01/2013
Santa Clara Valley Medical Center 09/14/2013, 09/15/2013 09/27/2013
California Department of Public Health 08/20/2013 09/26/2013
ICG America 01/02/2013 09/24/2013
Unique Vintage 09/18/2013 09/24/2013
American Express Travel Related Services Company, Inc and /or its Affiliates (“AXP”) n/a 09/23/2013
Windhaven Investment Management, Inc. n/a 09/23/2013
BEL USA LLC 03/01/2013, 07/15/2013 09/20/2013
PLS Financial Services, Inc. n/a 09/18/2013