California’s Attorney General added 3 new data breach notices to its public list on July 27, 2026, according to the California AG Data Breach List.
Unlike Texas and Washington, California’s public list does not publish a residents-affected count — so this roundup tracks incident visibility and reporting dates, not population impact. For affected-resident totals, see our Texas OAG breach tracker.
July month-to-date now totals 48 notices on the California list through July 27, 2026.
Notices Reported July 27, 2026
| Organization | Breach Date(s) (if known) | Reported |
|---|---|---|
| JRK Property Holdings, Inc. | 03/26/2026 | 07/27/2026 |
| Regional Center of Orange County | 05/27/2026 | 07/27/2026 |
| SPay Inc dba Stack Sports | 05/08/2026 | 07/27/2026 |
Independent Cybersecurity Audits
EmailMeNow domain audits on July 27, 2026 scored 2 filer domains in this batch.
1 of 2 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
SPay Inc dba Stack Sports (stacksports.com) leads at 65% overall; JRK Property Holdings, Inc. (jrk.com) scores 62%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| JRK Property Holdings, Inc. | jrk.com | 62% | 85% | 45% | 37% | Above Average |
| SPay Inc dba Stack Sports | stacksports.com | 65% | 90% | 15% | 45% | Above Average |
Audit links: jrk.com · stacksports.com
Related trackers
- All state AG trackers
- Texas OAG YTD dashboard
- California AG breach list
- Washington AG tracker
- Healthcare AG breach tracker
- Washington healthcare breaches (2026)
- Washington law firm breaches (2026)
- CA August roundup
- TX August roundup
- WA May roundup
- TX Parks breach
- Have I Been Pwned
- HIBP August roundup
- Breach data week (August)
- HHS OCR July roundup
- SEC 8-K July roundup
- Monitoring guide
Source: California AG — Data Breach List