# Columbia Bank: data breach notice filed with the Washington Attorney General (2026-04-17)

**Score:** 25/100

| Field | Value |
|---|---|
| Organization | Columbia Bank |
| Attorney General notified | WA |
| Notice date | 2026-04-17 |
| Breach dates | 2025-10-02 to 2025-12-22 |
| Cause | Theft or Mistake |
| Industry | Finance |
| State residents affected | 1,607 |
| Days from discovery to notice | 119 |
| Organization state | WA |

## Why this score


Source: Washington State Attorney General data breach notifications (data.wa.gov) and California Attorney General data security breach list (oag.ca.gov) (https://data.wa.gov/d/sb4j-ca4h). Last refreshed: 2026-11-04T06:06:58.316Z.
From the Washington, California and Delaware Attorney General breach notification lists, as posted. A notice is the organization's own report under state breach-notification law; it is not a finding of wrongdoing or of harm. California does not publish cause or counts in its list; Delaware lists data types and counts but not cause. Read the notice on the AG site before relying on it.