Cal. Data Breaches 3-21
California Attorney General’s Office Data Breach List (3-2021)
https://oag.ca.gov/privacy/databreach/list
California law requires a business or state agency to notify any California resident whose unencrypted personal information, as defined, was acquired, or reasonably believed to have been acquired, by an unauthorized person. (You can read the law here: California Civil Code s. 1798.29(a) for state agencies and California Civ. Code s. 1798.82(a) for businesses).