Confirmed breach · 2 breaches on record
USUnited States
Valley Mountain Regional Center (United States) notified the California Attorney General of a data breach on 25 July 2025. The breach began on 14 July 2025, 11 days before it was reported.
The register’s list does not say what was exposed; the notice it links to (under Sources) usually does.
Official notices are read by code from the regulator’s own register. More notices to California. · Corrections and changes
The register’s list does not say what was exposed; the notice it links to (under Sources) usually does.
Before the notice: the ransomware gang Karakurt named Valley Mountain Regional Center on its leak site on 31 August 2023, 232 days before this was reported. Matched by the organisation’s name: the notice itself does not say who the attacker was.
Official notices are read by code from the regulator’s own register. More notices to Oregon, California. · Corrections and changes
From the official registers’ and Have I Been Pwned’s full histories. A name match: check the notice to be sure it is the same company.
From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.
Privacy Unpacked