California’s Attorney General added 4 new data breach notices to its public list on October 22, 2026, according to the California AG Data Breach List.
Unlike Texas and Washington, California’s public list does not publish a residents-affected count — so this roundup tracks incident visibility and reporting dates, not population impact. For affected-resident totals, see our Texas OAG breach tracker.
October month-to-date now totals 39 notices on the California list through October 22, 2026.
Notices Reported October 22, 2026
| Organization | Breach Date(s) (if known) | Reported |
|---|---|---|
| BASS Medical Group | 09/04/2026 | 10/22/2026 |
| Deposition Solutions, LLC (d/b/a Lexitas) | 09/01/2019 | 10/22/2026 |
| Dill Dill Carr Stonbraker & Hutchings, P.C. | 10/22/2025 | 10/22/2026 |
| Opportune LLP | 06/22/2026 | 10/22/2026 |
Independent Cybersecurity Audits
EmailMeNow domain audits on October 22, 2026 scored 4 filer domains in this batch.
4 of 4 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
BASS Medical Group (bassmedicalgroup.com) leads at 71% overall; Dill Dill Carr Stonbraker & Hutchings, P.C. (dillanddill.com) scores 47%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| BASS Medical Group | bassmedicalgroup.com | 71% | 75% | 15% | 84% | Good |
| Deposition Solutions, LLC (d/b/a Lexitas) | depositionsolutions.com | 47% | 50% | 15% | 37% | Below Average |
| Dill Dill Carr Stonbraker & Hutchings, P.C. | dillanddill.com | 47% | 50% | 15% | 37% | Below Average |
| Opportune LLP | opportune.com | 63% | 50% | 15% | 92% | Above Average |
Audit links: bassmedicalgroup.com · depositionsolutions.com · dillanddill.com · opportune.com
Related trackers
- All state AG trackers
- California AG breach list
- Texas OAG YTD dashboard
- Washington AG tracker
- Healthcare AG breach tracker
Source: California AG — Data Breach List