Research / BreachNoticePulse
New Data Breach Notices Filed with the Washington & California Attorneys General: 2026 statistics from 1,547 public records
California leads with 1,061 of 1,547 records (68.6%), ahead of Washington with 385 (24.9%) (as of 2026-11-04; source: Washington State Attorney General data breach notifications (data.wa.gov) and California Attorney General data security breach list (oag.ca.gov)).
Data as of · Compiled by Zalwin from Washington State Attorney General data breach notifications (data.wa.gov) and California Attorney General data security breach list (oag.ca.gov)
Key findings
- Zalwin's BreachNoticePulse dataset holds 1,547 BreachNoticePulse records dated 2024-10-28 to 2026-11-02 (as of 2026-11-04; source: Washington State Attorney General data breach notifications (data.wa.gov) and California Attorney General data security breach list (oag.ca.gov)). #
- California leads with 1,061 of 1,547 records (68.6%), ahead of Washington with 385 (24.9%) (as of 2026-11-04; source: Washington State Attorney General data breach notifications (data.wa.gov) and California Attorney General data security breach list (oag.ca.gov)). #
- The most common cause is Not stated (California list): 1,162 of 1,547 records (75.1%) (as of 2026-11-04; source: Washington State Attorney General data breach notifications (data.wa.gov) and California Attorney General data security breach list (oag.ca.gov)). #
- Across 480 records with a stated state residents affected (wa, de), the total is 9,882,667 and the median is 1,991; the largest is 786,927 (Conduent Business Services LLC) (as of 2026-11-04; source: Washington State Attorney General data breach notifications (data.wa.gov) and California Attorney General data security breach list (oag.ca.gov)). #
- The top 10% of records by state residents affected (wa, de) (48 of 480) account for 81.5% of the total (as of 2026-11-04; source: Washington State Attorney General data breach notifications (data.wa.gov) and California Attorney General data security breach list (oag.ca.gov)). #
- 63 of 1,547 records (4.1%) are dated within the 30 days before 2026-11-04 (source: Washington State Attorney General data breach notifications (data.wa.gov) and California Attorney General data security breach list (oag.ca.gov)). #
- In California, the leading cause is Not stated (California list) with 1,061 of 1,061 records (100.0%) (as of 2026-11-04; source: Washington State Attorney General data breach notifications (data.wa.gov) and California Attorney General data security breach list (oag.ca.gov)). #
BreachNoticePulse records by state
| Group | Records | Share |
|---|---|---|
| California | 1,061 | 68.6% |
| Washington | 385 | 24.9% |
| Delaware | 101 | 6.5% |
BreachNoticePulse records by cause
| Group | Records | Share |
|---|---|---|
| Not stated (California list) | 1,162 | 75.1% |
| Cyberattack | 269 | 17.4% |
| Unauthorized access | 107 | 6.9% |
| Theft or mistake | 9 | 0.6% |
Methodology and data provenance
- Sample: 1,547 public records dated 2024-10-28 to 2026-11-02; illustrative samples excluded.
- Source: Washington State Attorney General data breach notifications (data.wa.gov) and California Attorney General data security breach list (oag.ca.gov). Refreshed automatically about every 24 hours; figures above are as of 2026-11-04.
- Shares are of all records in the dataset; totals and medians use only records with a stated state residents affected (wa, de).
- Organization-level data only. Informational; verify individual records at the official source.
Cite this study
Zalwin Research, "BreachNoticePulse statistics" (data as of 2026-11-04), https://zalwin.com/research/breachnoticepulse
Search the BreachNoticePulse records Browse by state and category