Incident · one vendor, 2 organisations

The Cerenade breach

10 December 2025 to 3 March 2026

2 organisations on the tracker had data taken through Cerenade, which reported its own breach on 3 March 2026. Each one is listed with the words of the source that names Cerenade.

The vendor

1. C CerenadeUSUnited States · 3 March 2026 790people
2. C CerenadeUSUnited States · 2 January 2026 Driver’s license numbersDates of birthNames+1 1.7Kpeople

Organisations affected through Cerenade

1. JF Jewish Family and Community Services- East BayUSUnited States · 10 December 2025 –not reported
   with one of our vendors, Cerenade notice letter

Counts are each organisation’s own and can overlap: one person can be a customer of several. An organisation joins this list only when a source names Cerenade as the way its data was taken.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.