Data Breaches Reported in California
Companies that reported data breaches affecting California residents to the state attorney general.
California has the strongest consumer data privacy laws in the country. As of January 1, 2026, SB 446 requires companies to notify California residents within 30 days of discovering a breach (Cal. Civ. Code § 1798.82). The CCPA (Cal. Civ. Code § 1798.150) gives California residents a private right of action with statutory damages of $100 to $750 per consumer per incident when unencrypted personal information is exposed due to a company's failure to implement reasonable security — no proof of actual financial harm required.
Loading…