Healthy
California Attorney General Data Security Breach List
California · Named Notification
The source list concerns sample notices submitted when more than 500 California residents are notified.
Redistribution: Approved With Conditions
The public record
The source directory
Source policies
What each source publishes, who it names, how long records stay available and what we can reproduce. Open a source for its reporting rules and limits.
Source information
Supported sources
Each has its own collection rules and publication limits.
Healthy
CNIL personal data breach notifications
France · Anonymized Notification
The official dataset concerns GDPR notifications to CNIL of personal data breaches presenting a risk to the rights and freedoms of affected people.
Redistribution: Approved With Conditions
Healthy
Curated OAIC data-breach regulatory actions
Australia · Regulatory Action
Selective official regulatory publications relevant to public data-breach activity.
Redistribution: Approved With Conditions
Healthy
ICO data security incident trends
United Kingdom · Anonymized Notification
The source covers personal data breaches reported to the ICO under UK GDPR reporting requirements; it is not a register of every data security incident in the United Kingdom.
Redistribution: Approved With Conditions
Healthy
Massachusetts Data Breach Notification Reports
Massachusetts · Named Notification
Reports concern breaches affecting Massachusetts residents under the state reporting framework.
Redistribution: Approved With Conditions
Healthy
Netherlands AP data breach statistics
Netherlands · National Aggregate
The figures concern personal data breach notifications received by Autoriteit Persoonsgegevens under the GDPR reporting framework.
Redistribution: Approved With Conditions
Healthy
NSW IPC MNDB Scheme Data Snapshot
New South Wales · State Aggregate
Eligible data breach notifications made by NSW public sector agencies under Part 6A of the PPIP Act.
Redistribution: Approved With Conditions
Healthy
NSW IPC Public Notifications Register
New South Wales · Regulator Register Entry
Public notification is used where direct notification is not reasonably practicable; exemptions and direct notifications affect publication.
Redistribution: Approved With Conditions
Healthy
OAIC Notifiable Data Breaches statistics
Australia · National Aggregate
Notifications concern eligible data breaches under Part IIIC of the Privacy Act 1988; the workbook contains aggregate statistics, not a register of named notifications.
Redistribution: Approved With Conditions
Healthy
Washington Attorney General Data Breach Notifications
Washington · Named Notification
The source states that notice to the Attorney General is required when more than 500 Washington residents are affected.
Redistribution: Approved With Conditions
Reviewed, not collected
Access, export or reuse issues need to be resolved before these can be included.
Deferred
HHS OCR Breach Portal
United States · Named Notification
The public list covers reported breaches of unsecured protected health information affecting 500 or more individuals.
Redistribution: Deferred
Deferred
Ireland DPC data breach statistics
Ireland · National Aggregate
The annual figures concern valid personal data breach notifications received by the Data Protection Commission.
Redistribution: Deferred
Deferred
Maine Attorney General data security breach notices
Maine · Named Notification
The official site describes notices submitted under Maine data security breach law; the database is not currently available for bounded collection.
Redistribution: Deferred
Deferred
Texas Attorney General data security breach reports
Texas · Regulator Register Entry
The public reporting requirement applies to data breaches affecting at least 250 Texas residents, subject to the official statutory guidance.
Redistribution: Deferred