California’s Attorney General added 3 new data breach notices to its public list on July 23, 2026, according to the California AG Data Breach List.
Unlike Texas and Washington, California’s public list does not publish a residents-affected count — so this roundup tracks incident visibility and reporting dates, not population impact. For affected-resident totals, see our Texas OAG breach tracker.
July month-to-date now totals 37 notices on the California list through July 23, 2026.
Notices Reported July 23, 2026
| Organization | Breach Date(s) (if known) | Reported |
|---|---|---|
| Devereux Foundation | 11/06/2025, 11/09/2025 | 07/23/2026 |
| Safetyfirst Systems, LLC | 01/16/2026, 01/19/2026 | 07/23/2026 |
| The Moody Bible Institute of Chicago | 06/12/2026 | 07/23/2026 |
Independent Cybersecurity Audits
EmailMeNow domain audits on July 23, 2026 scored 4 filer domains in this batch.
4 of 4 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
Devereux Foundation (devereux.org) leads at 70% overall; Safetyfirst Systems, LLC (safetyfirst.com) scores 42%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| Devereux Foundation | devereux.org | 70% | 90% | 15% | 43% | Good |
| Safetyfirst Systems, LLC | safetyfirst.com | 42% | 25% | 15% | 37% | Below Average |
| The Moody Bible Institute of Chicago | moody.edu | 64% | 75% | 15% | 45% | Above Average |
| The Moody Bible Institute of Chicago | moodybible.org | 64% | 75% | 15% | 45% | Above Average |
Audit links: devereux.org · safetyfirst.com · moody.edu · moodybible.org
Related trackers
- All state AG trackers
- Texas OAG YTD dashboard
- California AG breach list
- Washington AG tracker
- Healthcare AG breach tracker
- Washington healthcare breaches (2026)
- Washington law firm breaches (2026)
- CA August roundup
- TX August roundup
- WA May roundup
- TX Parks breach
- Have I Been Pwned
- HIBP August roundup
- Breach data week (August)
- HHS OCR July roundup
- SEC 8-K July roundup
- Monitoring guide
Source: California AG — Data Breach List