Privacy Unpacked

Incident · one vendor, 2 organisations

The CodeRed breach

10 December 2025 to 16 January 2026

2 organisations on the tracker had data taken through CodeRed. Each one is listed with the words of the source that names CodeRed.

Organisations affected through CodeRed

  1. City of Puyallup (CodeRed)USUnited States · 10 December 2025 2.6KWashington residents
    our 3rd party software that provides our emergency alert service, called CodeRed, suffered a cybersecurity incident Washington Attorney General
  2. Sonoma County Department of Emergency ManagementUSUnited States · 16 January 2026 –not reported
    the CodeRED alert and warning platform, which is operated by a third-party vendor notice letter

Counts are each organisation’s own and can overlap: one person can be a customer of several. An organisation joins this list only when a source names CodeRed as the way its data was taken.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.