About Breach Notice Tracker

Sources

• Breach notices: the California Attorney General's data breach list and its CSV export. California law requires organizations to submit a sample notice to the Attorney General when a breach affects more than 500 California residents.
• Notice links: each breach page links to the official listing on oag.ca.gov and, where the listing includes one, the sample notice PDF filed by the organization.
• Settlements: official settlement administrator websites, linked on every entry.
• Guidance: the credit bureaus' official freeze pages, AnnualCreditReport.com, the IRS, and the FTC's IdentityTheft.gov.

Methodology

• We download the AG's CSV export and include every notice with a reported date from October 1, 2024 onward (1,161 notices, reported October 1, 2024 to October 16, 2026).
• Organization names, breach dates, and reported dates are copied as published. A missing breach date means none was given in the listing. Where an organization filed more than one notice, each gets its own page.
• We match each notice to its official listing page to find the notice link and sample letter PDF. We do not summarize what information was exposed unless it comes from the notice itself; the “What to do now” section on every page is general guidance.
• Settlements are added only when we can confirm the claim deadline on the official settlement website. That list is partial.
• The data is refreshed regularly. The last update was October 17, 2026.

Disclaimer

Breach Notice Tracker is an independent project. It is not affiliated with, endorsed by, or operated by the California Attorney General, the California Department of Justice, any company listed, any credit bureau, or any settlement administrator. Inclusion on the AG list means an organization submitted a breach notice; it is not a finding of wrongdoing.

Information here is provided as-is for general informational purposes and may contain errors or be out of date. It is not legal advice. Always rely on the official notice, the official settlement website, or a qualified professional for decisions about your situation.

Some spots on this site are reserved for possible future identity-protection partner links. They are clearly labeled, and none are active today.