Confirmed breach · 2 breaches on record
USUnited States
Boutin Jones (United States) notified the California Attorney General of a data breach on 3 December 2025. The breach began on 15 October 2024, 414 days before it was reported.
The register’s list does not say what was exposed; the notice it links to (under Sources) usually does.
Official notices are read by code from the regulator’s own register. More notices to California. · Corrections and changes
The register’s list does not say what was exposed; the notice it links to (under Sources) usually does.
Before the notice: the ransomware gang Fog named Boutin Jones on its leak site on 29 January 2025, 173 days before this was reported. Matched by the organisation’s name: the notice itself does not say who the attacker was.
Official notices are read by code from the regulator’s own register. More notices to California. · Corrections and changes
From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.
Privacy Unpacked