California note · Money and taxes
Data breach notices deserve a slow read
Verify a breach notice through a known company channel, read which data was involved, and treat the Attorney General's breach list as supporting evidence rather than a complete registry.
A data breach notice may be real, junk mail, or a scam that looks helpful. Do not use the link or phone number in it yet. First, check the notice through a company site or number you already know. Save the notice and its envelope.
The Attorney General posts sample notices for breaches that affect more than 500 California residents. A match can help confirm a letter. An absent match does not mean that it is fake. Smaller breaches are not posted there, and a filing may arrive later.
Read which data was exposed. Change an exposed password anywhere you used it again. For card data, call the card issuer. Think about a free credit freeze if the data could help someone open a new account. For medical or insurance data, check with the right provider or insurer too.
Civil Code section 1798.82 covers some breaches. A covered business generally must notify affected California residents within 30 calendar days after it finds the breach. An allowed law-enforcement delay is an exception. So is time that is reasonably needed to find the scope or restore system integrity.
If the business notifies more than 500 California residents, another clock applies. It generally has 15 calendar days after the consumer notices to send a sample to the Attorney General. These are duties for the business. They are not deadlines for a consumer to click a link or sign up.
Where to see it
California Attorney General data security breach reports.
Official sources
Official source trail
Reviewed July 14, 2026
California Porch explains the path. The official source is still the place to confirm the current rule, fee, form, map, deadline, or office decision.
Use the official page before you spend money, file paperwork, rely on a deadline, or change a property.
Related notes
Keep following this thread.
These are picked from nearby places, shared tags, and the same California topic shelf.
Santa Barbara business tax certificate is not the same as a permit
Santa Barbara treats its Business Tax Certificate as a city tax record, while separate business permits may still apply depending on the activity.
Read next →An FTB tax notice deserves a dated paper trail
Read the notice deadline first; an FTB payment-plan request has eligibility rules, a fee, and does not replace a protest or appeal.
Read next →A supplemental property tax bill can arrive after a home purchase
A California supplemental property tax bill is separate from the annual bill and normally is not sent to the mortgage lender, even with an impound account.
Read next →