Privacy Unpacked

Confirmed breach

Covered California data breach

USUnited States

Covered California (United States) notified the California Attorney General of a data breach on 16 October 2026. The breach began on 13 May 2026, 156 days before it was reported.

Status
Confirmed breach
People affected
Not reported yet
Reported
16 October 2026
Breach began
13 May 2026
Time to tell
156 days

What was exposed

The register’s list does not say what was exposed; the notice it links to (under Sources) usually does.

Sources

If Covered California had your data

  1. Look for Covered California’s own notice or letter: it should say what of yours was involved. Keep it.
  2. The register’s list does not say what was exposed; the notice it links to (under Sources) usually does. If Covered California has a password of yours, change it now to be safe.
  3. Expect scams that use your details: calls, texts or emails pretending to be Covered California, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

One email to confirm first. We use your address only for this alert, and one click deletes it.

More breaches in United States

  1. Johns Hopkins Bayview Medical CenterUSUnited States · MD · 27 October 2026 Health and medical informationFinancial account and card detailsAdmission dates+3 3.1Kpatients
  2. Monmouth UniversityUSUnited States · NJ · 26 October 2026 Social Security numbersGovernment ID numbersHealth and medical information+2 346Vermont residents
  3. Frontline EducationUSUnited States · 26 October 2026 Social Security numbers 3KVermont residents
  4. USForexUSUnited States · 26 October 2026 –not reported
  5. Alpha Omega Alpha Honor Medical SocietyUSUnited States · 26 October 2026 Financial account and card details 12Vermont residents

Every breach in United States →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.