Privacy UnpackedOfficial breach registers
The regulators whose breach notices the tracker reads several times a day, straight from their own websites. A notice is the organisation’s own report of its breach: the strongest evidence a breach happened.
| Register | Notices | From | Latest |
|---|---|---|---|
| California Attorney General | 2,359 | 1 January 2023 | 26 October 2026 |
| Washington Attorney General | 948 | 4 January 2023 | 13 October 2026 |
| Oregon Department of Justice | 831 | 3 January 2023 | 21 October 2026 |
| Texas Attorney General | 701 | 1 April 2025 | 28 October 2026 |
| Indiana Attorney General | 1,226 | 19 November 2025 | 8 October 2026 |
| Vermont Attorney General | 491 | 17 April 2026 | 28 October 2026 |
| Iowa Attorney General | 292 | 4 January 2023 | 13 October 2026 |
| Wisconsin’s consumer protection department (DATCP) | 22 | 22 September 2023 | 30 June 2026 |
| Delaware Attorney General | 204 | 3 January 2023 | 11 July 2025 |
| US Department of Health and Human Services | 117 | 31 July 2026 | 8 October 2026 |
| US Securities and Exchange Commission | 157 | 6 February 2023 | 22 October 2026 |
Some states publish nothing we can read (New Hampshire, Montana, Massachusetts, Maryland and South Carolina block automated reading), so they are not here.
From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.