# Sax LLP: data breach notice filed with the Delaware Attorney General (2025-12-16)

**Score:** 25/100

| Field | Value |
|---|---|
| Organization | Sax LLP |
| Attorney General notified | DE |
| Notice date | 2025-12-16 |
| Breach dates | 2024-07-30 |
| State residents affected | 745 |
| Total affected (all states) | 228,876 |
| Data exposed | Social Security number, Individual taxpayer ID number, Medical treatment by a healthcare professional, Health insurance policy number, subscriber ID number, or any other unique identifier used by health insurer to identify person, Driver's license number, Passport number, Medical history |
| Notice letter | https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2026/01/Sax_-Reg-Notice.pdf |
| Days from discovery to notice | 15 |

## Why this score


Source: Washington State Attorney General data breach notifications (data.wa.gov) and California Attorney General data security breach list (oag.ca.gov) (https://data.delaware.gov/d/dir6-wx8v). Last refreshed: 2026-11-04T06:06:58.316Z.
From the Washington, California and Delaware Attorney General breach notification lists, as posted. A notice is the organization's own report under state breach-notification law; it is not a finding of wrongdoing or of harm. California does not publish cause or counts in its list; Delaware lists data types and counts but not cause. Read the notice on the AG site before relying on it.