The Washington State Attorney General published 3 new data breach notifications on September 17, 2026, according to the Washington AG Data Breach Notifications portal. Combined, these notifications cover 16,469 Washingtonians.
The largest filing — CallonDoc, Inc. — accounts for 12,186 affected Washingtonians in this batch. See the live Washington AG tracker for monthly charts.
September month-to-date now totals 16 published notifications affecting 64,670 Washingtonians through September 17, 2026.
Notifications Published September 17, 2026
| Entity | Washingtonians Affected | Date Published |
|---|---|---|
| CallonDoc, Inc. | 12,186 | 09/17/2026 |
| OneMain Financial Group, LLC | 2,928 | 09/17/2026 |
| Boston Capital Holdings LP | 1,355 | 09/17/2026 |
Independent Cybersecurity Audits
EmailMeNow domain audits on September 17, 2026 scored 3 filer domains in this batch.
2 of 3 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
OneMain Financial Group, LLC (onemainfinancial.com) leads at 79% overall; CallonDoc, Inc. (callondoc.com) scores 43%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| CallonDoc, Inc. | callondoc.com | 43% | 35% | 15% | 45% | Below Average |
| OneMain Financial Group, LLC | onemainfinancial.com | 79% | 90% | 15% | 92% | Good |
| Boston Capital Holdings LP | bostoncapitalleasing.com | 45% | 45% | 45% | 45% | Below Average |
Audit links: callondoc.com · onemainfinancial.com · bostoncapitalleasing.com
Related trackers
- All state AG trackers
- Washington AG tracker
- Texas OAG YTD dashboard
- California AG breach list
- Healthcare AG breach tracker