California’s Attorney General added 3 new data breach notices to its public list on November 4, 2026, according to the California AG Data Breach List.
Unlike Texas and Washington, California’s public list does not publish a residents-affected count — so this roundup tracks incident visibility and reporting dates, not population impact. For affected-resident totals, see our Texas OAG breach tracker.
November month-to-date now totals 10 notices on the California list through November 4, 2026.
Notices Reported November 4, 2026
| Organization | Breach Date(s) (if known) | Reported |
|---|---|---|
| Hoag Memorial Hospital Presbyterian | 10/08/2026 | 11/04/2026 |
| RevSpring, Inc. | 05/15/2026, 06/01/2026 | 11/04/2026 |
| Yu Ming Charter School | 05/22/2026 | 11/04/2026 |
Independent Cybersecurity Audits
EmailMeNow domain audits on November 4, 2026 scored 3 filer domains in this batch.
3 of 3 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
Yu Ming Charter School (charter.com) leads at 47% overall; Hoag Memorial Hospital Presbyterian (hoag.com) scores 32%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| Hoag Memorial Hospital Presbyterian | hoag.com | 32% | 10% | 15% | 40% | Weak |
| RevSpring, Inc. | revspringinc.com | 45% | 45% | 15% | 37% | Below Average |
| Yu Ming Charter School | charter.com | 47% | 50% | 15% | 37% | Below Average |
Audit links: hoag.com · revspringinc.com · charter.com
Related trackers
- All state AG trackers
- California AG breach list
- Texas OAG YTD dashboard
- Washington AG tracker
- Healthcare AG breach tracker
Source: California AG — Data Breach List