Past Reports

2016 Data Breach Report

Washington law requires businesses, individuals, and public agencies to notify any Washington resident who is at risk of harm because of the unauthorized acquisition of data that compromises the security, confidentiality, or integrity of that resident’s personal information.

Under a law enacted in 2015, any business, individual, or public agency that is required to issue a security breach notification to more than 500 Washington residents as a result of a single security breach shall electronically submit a single sample copy of that security breach notification, excluding any personally identifiable information, to the Attorney General.

Please see the “Reporting Data Breaches” section of our business resources page for more information on how to submit a data security breach notification sample to our office.

If you are a consumer who received a data breach notice, or you believe your personal information was lost or exposed, and you want to know what steps you should take to protect yourself, visit IdentityTheft.gov.

The Attorney General’s Office 2017 Data Breach Report is available here.

Data security breach notices submitted to our office in accordance with the law that took effect July 24, 2015, are published for public education purposes, below. To read a notice, click on the name of the organization in the list.