California’s Attorney General added 6 new data breach notices to its public list on October 27, 2026, according to the California AG Data Breach List.
Unlike Texas and Washington, California’s public list does not publish a residents-affected count — so this roundup tracks incident visibility and reporting dates, not population impact. For affected-resident totals, see our Texas OAG breach tracker.
October month-to-date now totals 53 notices on the California list through October 27, 2026.
Notices Reported October 27, 2026
| Organization | Breach Date(s) (if known) | Reported |
|---|---|---|
| Baker & McKenzie LLP | 08/14/2026, 08/17/2026 | 10/27/2026 |
| Directed Trust Company | 07/04/2026, 07/07/2026 | 10/27/2026 |
| Hitec Group USA | 09/13/2026, 09/17/2026 | 10/27/2026 |
| Indico Data Solutions | 05/05/2026 | 10/27/2026 |
| Sarasota US Topco, Inc. d/b/a Sarku Japan (“Sarku”) | 09/07/2026 | 10/27/2026 |
| Tradier Brokerage Inc. | 08/28/2026 | 10/27/2026 |
Independent Cybersecurity Audits
EmailMeNow domain audits on October 27, 2026 scored 6 filer domains in this batch.
5 of 6 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
Baker & McKenzie LLP (bakermckenzie.com) leads at 83% overall; Hitec Group USA (hitec-usa.com) scores 31%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| Baker & McKenzie LLP | bakermckenzie.com | 83% | 90% | 45% | 98% | Good |
| Directed Trust Company | directedtrust.com | 64% | 90% | 15% | 40% | Above Average |
| Hitec Group USA | hitec-usa.com | 31% | 10% | 15% | 37% | Weak |
| Indico Data Solutions | indicodata.ai | 53% | 65% | 15% | 37% | Average |
| Sarasota US Topco, Inc. d/b/a Sarku Japan (“Sarku”) | sarasota.com | 44% | 25% | 15% | 62% | Below Average |
| Tradier Brokerage Inc. | tradierbrokerage.com | 48% | 50% | 15% | 40% | Below Average |
Audit links: bakermckenzie.com · directedtrust.com · hitec-usa.com · indicodata.ai · sarasota.com · tradierbrokerage.com
Related trackers
- All state AG trackers
- Texas OAG YTD dashboard
- California AG breach list
- Washington AG tracker
- Healthcare AG breach tracker
- Washington healthcare breaches (2026)
- Washington law firm breaches (2026)
- CA October roundup
- TX October roundup
- WA September roundup
- TX Parks breach
- Have I Been Pwned
- HIBP October roundup
- Breach data week (November)
- HHS OCR October roundup
- SEC 8-K October roundup
- Monitoring guide
Source: California AG — Data Breach List