California’s Attorney General added 4 new data breach notices to its public list on July 17, 2026, according to the California AG Data Breach List.
Unlike Texas and Washington, California’s public list does not publish a residents-affected count — so this roundup tracks incident visibility and reporting dates, not population impact. For affected-resident totals, see our Texas OAG breach tracker.
July month-to-date now totals 27 notices on the California list through July 17, 2026.
Notices Reported July 17, 2026
| Organization | Breach Date(s) (if known) | Reported |
|---|---|---|
| BAYADA Home Health Care, Inc. | 03/02/2026 | 07/17/2026 |
| Quontic Bank Acquisition Corp. | n/a | 07/17/2026 |
| The Estée Lauder Companies | 08/09/2025, 08/12/2025 | 07/17/2026 |
| ZenPatient, Inc. | 12/05/2025, 02/12/2026 | 07/17/2026 |
Independent Cybersecurity Audits
EmailMeNow domain audits on July 17, 2026 scored 4 filer domains in this batch.
4 of 4 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
The Estée Lauder Companies (esteelauder.com) leads at 69% overall; ZenPatient, Inc. (zenpatient.com) scores 42%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| BAYADA Home Health Care, Inc. | bayada.com | 57% | 25% | 15% | 87% | Average |
| Quontic Bank Acquisition Corp. | quontic.com | 68% | 90% | 15% | 40% | Above Average |
| The Estée Lauder Companies | esteelauder.com | 69% | 90% | 15% | 40% | Above Average |
| ZenPatient, Inc. | zenpatient.com | 42% | 25% | 15% | 37% | Below Average |
Audit links: bayada.com · quontic.com · esteelauder.com · zenpatient.com
Related trackers
- All state AG trackers
- Texas OAG YTD dashboard
- California AG breach list
- Washington AG tracker
- Healthcare AG breach tracker
- Washington healthcare breaches (2026)
- Washington law firm breaches (2026)
- CA July roundup
- TX July roundup
- WA May roundup
- TX Parks breach
- Have I Been Pwned
- HIBP July roundup
- Breach data week (July)
- HHS OCR July roundup
- SEC 8-K July roundup
- Monitoring guide
Source: California AG — Data Breach List