Back to news
Cybersecurity Alert
July 27, 2026 by EmailMeNow IT Consulting

3 New California AG Breach Notices Published July 27, 2026

California's data breach list added 3 notices on July 27, 2026. California does not publish residents-affected counts — this roundup tracks reporting visibility.

Source: California Attorney General - Data Breach List

CybersecurityData BreachCaliforniaState AG
California Attorney General data breach notices for July 27, 2026

California’s Attorney General added 3 new data breach notices to its public list on July 27, 2026, according to the California AG Data Breach List.

Unlike Texas and Washington, California’s public list does not publish a residents-affected count — so this roundup tracks incident visibility and reporting dates, not population impact. For affected-resident totals, see our Texas OAG breach tracker.

July month-to-date now totals 48 notices on the California list through July 27, 2026.

Notices Reported July 27, 2026

OrganizationBreach Date(s) (if known)Reported
JRK Property Holdings, Inc.03/26/202607/27/2026
Regional Center of Orange County05/27/202607/27/2026
SPay Inc dba Stack Sports05/08/202607/27/2026

Independent Cybersecurity Audits

EmailMeNow domain audits on July 27, 2026 scored 2 filer domains in this batch. 1 of 2 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver. SPay Inc dba Stack Sports (stacksports.com) leads at 65% overall; JRK Property Holdings, Inc. (jrk.com) scores 62%.

Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.

OrganizationDomainOverallIdentityTransportWebsiteRisk
JRK Property Holdings, Inc.jrk.com62%85%45%37%Above Average
SPay Inc dba Stack Sportsstacksports.com65%90%15%45%Above Average

Audit links: jrk.com · stacksports.com

Source: California AG — Data Breach List