organization stringlengths 10 49 | org_key stringlengths 3 46 | state_ag stringclasses 1
value | reported_date stringdate 2026-10-28 00:00:00 2026-11-04 00:00:00 | breach_dates stringlengths 10 22 ⌀ | breach_start stringdate 2025-01-30 00:00:00 2026-10-08 00:00:00 ⌀ | residents_affected float64 | breach_cause float64 | attack_type float64 | industry float64 | business_type float64 | days_to_notify float64 | notices_all_states int64 1 3 | states_notified stringclasses 2
values | repeat_notifier bool 2
classes | fed_uei stringclasses 3
values | fed_recipient_name stringclasses 3
values | fed_obligated_fy25_plus float64 0 65.2M ⌀ | fed_top_agency stringclasses 3
values | in_ontology bool 2
classes | source_url stringclasses 1
value |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Yu Ming Charter School | YU MING CHARTER SCHOOL | CA | 2026-11-04 | 05/22/2026 | 2026-05-22 | null | null | null | null | null | null | 1 | CA | false | null | null | null | null | false | https://oag.ca.gov/privacy/databreach/list |
RevSpring, Inc. | REVSPRING | CA | 2026-11-04 | 05/15/2026, 06/01/2026 | 2026-05-15 | null | null | null | null | null | null | 1 | CA | false | null | null | null | null | false | https://oag.ca.gov/privacy/databreach/list |
Hoag Memorial Hospital Presbyterian | HOAG MEMORIAL HOSPITAL PRESBYTERIAN | CA | 2026-11-04 | 10/08/2026 | 2026-10-08 | null | null | null | null | null | null | 1 | CA | false | VHAKRT1GGSV4 | HOAG MEMORIAL HOSPITAL PRESBYTERIAN | 0 | Department of Health and Human Services | true | https://oag.ca.gov/privacy/databreach/list |
Upland Unified School District | UPLAND UNIFIED SCHOOL DISTRICT | CA | 2026-11-03 | 07/02/2026 | 2026-07-02 | null | null | null | null | null | null | 1 | CA | false | null | null | null | null | false | https://oag.ca.gov/privacy/databreach/list |
Center Theatre Group of Los Angeles | CENTER THEATRE GROUP OF LOS ANGELES | CA | 2026-11-03 | 07/27/2026 | 2026-07-27 | null | null | null | null | null | null | 1 | CA | false | HB3LA9WSHTN8 | CENTER THEATRE GROUP OF LOS ANGELES | 20,000 | National Endowment for the Arts | true | https://oag.ca.gov/privacy/databreach/list |
Peninsula Corridor Joint Powers Board (Caltrain) | PENINSULA CORRIDOR JOINT POWERS BOARD CALTRAIN | CA | 2026-11-03 | null | null | null | null | null | null | null | null | 1 | CA | false | null | null | null | null | true | https://oag.ca.gov/privacy/databreach/list |
Hippo Analytics Inc. | HIPPO ANALYTICS | CA | 2026-11-03 | 01/30/2025 | 2025-01-30 | null | null | null | null | null | null | 1 | CA | false | null | null | null | null | false | https://oag.ca.gov/privacy/databreach/list |
DreamHost, LLC | DREAMHOST | CA | 2026-11-02 | 08/15/2026 | 2026-08-15 | null | null | null | null | null | null | 1 | CA | false | null | null | null | null | false | https://oag.ca.gov/privacy/databreach/list |
University of Mississippi Medical Center (“UMMC”) | UNIVERSITY OF MISSISSIPPI MEDICAL CENTER UMMC | CA | 2026-11-02 | 02/11/2026, 02/19/2026 | 2026-02-11 | null | null | null | null | null | null | 1 | CA | false | null | null | null | null | false | https://oag.ca.gov/privacy/databreach/list |
Cotton Incorporated | COTTON | CA | 2026-11-02 | 09/18/2026, 10/15/2026 | 2026-09-18 | null | null | null | null | null | null | 1 | CA | false | null | null | null | null | false | https://oag.ca.gov/privacy/databreach/list |
The Nueva School | NUEVA SCHOOL | CA | 2026-10-30 | 06/13/2026 | 2026-06-13 | null | null | null | null | null | null | 1 | CA | false | null | null | null | null | false | https://oag.ca.gov/privacy/databreach/list |
Central Ohio Primary Care Physicians, Inc. (COPC) | CENTRAL OHIO PRIMARY CARE PHYSICIANS INC COPC | CA | 2026-10-30 | 08/17/2026, 08/25/2026 | 2026-08-17 | null | null | null | null | null | null | 1 | CA | false | null | null | null | null | false | https://oag.ca.gov/privacy/databreach/list |
NCH Corporation | NCH | CA | 2026-10-30 | 01/21/2026, 02/25/2026 | 2026-01-21 | null | null | null | null | null | null | 1 | CA | false | null | null | null | null | true | https://oag.ca.gov/privacy/databreach/list |
Aesto, LLC | AESTO | CA | 2026-10-30 | 12/02/2025, 12/18/2025 | 2025-12-02 | null | null | null | null | null | null | 2 | CA,WA | false | null | null | null | null | false | https://oag.ca.gov/privacy/databreach/list |
El Camino Health | EL CAMINO HEALTH | CA | 2026-10-30 | 08/26/2026, 09/02/2026 | 2026-08-26 | null | null | null | null | null | null | 1 | CA | false | null | null | null | null | false | https://oag.ca.gov/privacy/databreach/list |
Baanx US Corp. | BAANX US | CA | 2026-10-30 | 09/23/2026 | 2026-09-23 | null | null | null | null | null | null | 1 | CA | false | null | null | null | null | false | https://oag.ca.gov/privacy/databreach/list |
EyeMed Vision Care, LLC | EYEMED VISION CARE | CA | 2026-10-30 | 09/22/2026 | 2026-09-22 | null | null | null | null | null | null | 3 | CA,WA | true | null | null | null | null | false | https://oag.ca.gov/privacy/databreach/list |
Marathon Health | MARATHON HEALTH | CA | 2026-10-29 | 08/24/2026 | 2026-08-24 | null | null | null | null | null | null | 1 | CA | false | null | null | null | null | false | https://oag.ca.gov/privacy/databreach/list |
Revolve Group, Inc. | REVOLVE GROUP | CA | 2026-10-29 | 09/11/2026 | 2026-09-11 | null | null | null | null | null | null | 1 | CA | false | null | null | null | null | false | https://oag.ca.gov/privacy/databreach/list |
Blossom BH Opco Inc. | BLOSSOM BH OPCO | CA | 2026-10-29 | null | null | null | null | null | null | null | null | 1 | CA | false | null | null | null | null | false | https://oag.ca.gov/privacy/databreach/list |
HCA Healthcare, Inc. | HCA HEALTHCARE | CA | 2026-10-29 | 08/12/2026 | 2026-08-12 | null | null | null | null | null | null | 3 | CA,WA | true | null | null | null | null | true | https://oag.ca.gov/privacy/databreach/list |
Bangkok Bank PCL - New York Branch | BANGKOK BANK PCL NEW YORK BRANCH | CA | 2026-10-29 | 09/17/2025 | 2025-09-17 | null | null | null | null | null | null | 1 | CA | false | null | null | null | null | false | https://oag.ca.gov/privacy/databreach/list |
Del Monte Foods Corporation II Inc. | DEL MONTE FOODS CORPORATION II | CA | 2026-10-29 | 02/07/2026 | 2026-02-07 | null | null | null | null | null | null | 1 | CA | false | VFHFFVVLQYF7 | DEL MONTE FOODS CORPORATION II INC. | 65,186,737.08 | Department of Agriculture | true | https://oag.ca.gov/privacy/databreach/list |
Photon Health | PHOTON HEALTH | CA | 2026-10-28 | 08/10/2026, 08/10/2026 | 2026-08-10 | null | null | null | null | null | null | 1 | CA | false | null | null | null | null | false | https://oag.ca.gov/privacy/databreach/list |
Troutman Pepper Locke LLP | TROUTMAN PEPPER LOCKE | CA | 2026-10-28 | 08/07/2026 | 2026-08-07 | null | null | null | null | null | null | 1 | CA | false | null | null | null | null | true | https://oag.ca.gov/privacy/databreach/list |
Corporate Data Breach Notices: free sample (Tensorust LLC)
Every breach notice filed with the California and Washington Attorneys General, by company, with repeat notifiers flagged.
Headline: State law makes companies tell the Attorney General when residents' data is breached, yet no regulator publishes one cross-state view by company.
This repository is a free teaser, not the dataset. It holds 25 example rows and a summary table with no names in it. The full file has 7,045 rows and is sold by Tensorust LLC: https://tensorust.com/datasets/data-breach-notices/.
Files here
| file | what it is |
|---|---|
sample.csv |
25 rows of the full file (the same sample shown on tensorust.com) |
summary_by_industry.csv |
row counts and totals by industry across the full file, no entity names (groups with fewer than 3 rows are folded into "Other") |
Summary by industry (largest groups)
| Industry | rows | Residents affected |
|---|---|---|
| (blank) | 5,372 | 0 |
| Business | 756 | 17,402,851 |
| Health | 332 | 13,378,577 |
| Finance | 265 | 7,854,940 |
| Education | 137 | 2,913,925 |
| Non-Profit/Charity | 125 | 3,684,697 |
| Government | 58 | 4,190,695 |
| TOTAL | 7,045 | 49,425,685 |
Full table: summary_by_industry.csv.
What the full file has
- 7,045 rows
- Key fields: organization, org_key, state_ag, reported_date, breach_dates, breach_start, residents_affected, breach_cause, attack_type, industry
- Parquet and CSV, a README with sources, method and limits, and the build script
- Free 25-row sample (no personal contact data)
Coverage: California notices since 2012 and Washington notices since 2016; 7,045 notices. Downloaded Nov 6, 2026; both lists update as notices are posted.
Columns in the full file
| column | meaning |
|---|---|
organization |
Breached organization as named in the notice |
org_key |
Tensorust ontology organization key (normalized name) |
state_ag |
Attorney General office the notice was filed with (CA or WA) |
reported_date |
Date the AG received or posted the notice |
breach_dates |
Breach date(s) as given in the notice |
breach_start |
First breach date parsed from the notice |
residents_affected |
Residents of that state affected (WA notices only; CA does not publish counts) |
breach_cause |
Cause as classified by WA AG (cyberattack, unauthorized access, theft, error) |
attack_type |
WA attack type (ransomware, phishing, malware) |
industry |
WA industry type |
business_type |
WA business type |
days_to_notify |
WA: days from discovery to notification |
notices_all_states |
Notices from this organization across both lists |
states_notified |
Which of the two AGs it notified |
repeat_notifier |
True when the organization filed 3 or more notices |
fed_uei |
UEI of a matching federal award recipient (exact ontology name key) |
fed_recipient_name |
Matching USAspending recipient name |
fed_obligated_fy25_plus |
Federal obligations to that recipient FY2025 onward (USD) |
fed_top_agency |
Top awarding agency |
in_ontology |
Organization key exists in the Tensorust ontology |
source_url |
Public list the row came from |
Get the full file
| tier | price | includes |
|---|---|---|
| Breach notice file | $750 | All 7,045 CA and WA AG breach notices as CSV and Parquet, with repeat-notifier flags and the federal-award join. |
| Monthly breach feed | $4,800 a year | The full file refreshed monthly with new notices, plus a monthly list of first-time and repeat notifiers. Up to 5 users. |
| Underwriting license | $18,000 a year | Weekly refresh, internal use across underwriting and claims teams, and the right to load the file into rating and portfolio tools. |
Email mattbusel@tensorust.com with the tier and a billing contact, and we will send a proper invoice (ACH or card). The file is delivered once the invoice is paid. Details and the live sample: https://tensorust.com/datasets/data-breach-notices/. All datasets: https://tensorust.com/datasets/
Method and limits
Both public lists are downloaded whole. Names are normalized with the Tensorust ontology key (case, punctuation and trailing legal-form words removed) to count notices per organization across the two states and to join exact-key matches to federal award recipients (USAspending obligations FY2025 onward). Duplicate rows (same organization, state and date) are dropped. repeat_notifier marks 3 or more notices.
Not a list of breached individuals (no personal data from the notices is included). Not a full national count: other states are not yet included, and California does not publish record counts. A federal-recipient match is an exact normalized-name match, not a verified corporate link. Not legal advice.
Sources
- California Attorney General data breach list, CSV export: https://oag.ca.gov/privacy/databreach/list
- Washington Attorney General data breach notifications (data.wa.gov sb4j-ca4h): https://data.wa.gov/api/views/sb4j-ca4h/rows.csv?accessType=DOWNLOAD
- Washington AG notification page: https://www.atg.wa.gov/data-breach-notifications
- USAspending.gov recipients FY2025 onward via the Tensorust ontology: https://www.usaspending.gov/
License
The sample and summary here are free to view, analyze and cite with attribution to "Tensorust LLC, https://tensorust.com/datasets/data-breach-notices/". The full dataset is licensed separately per tier. No resale or redistribution of Tensorust data without a written license.
Tensorust LLC, Tuckahoe NY. mattbusel@tensorust.com | https://tensorust.com
- Downloads last month
- 43