California’s Attorney General added 3 new data breach notices to its public list on September 15, 2026, according to the California AG Data Breach List.
Unlike Texas and Washington, California’s public list does not publish a residents-affected count — so this roundup tracks incident visibility and reporting dates, not population impact. For affected-resident totals, see our Texas OAG breach tracker.
September month-to-date now totals 27 notices on the California list through September 15, 2026.
Notices Reported September 15, 2026
| Organization | Breach Date(s) (if known) | Reported |
|---|---|---|
| Alliance Environmental Group, LLC | 04/24/2026 | 09/15/2026 |
| Leggett & Platt, Incorporated Employee Benefits Plan | 10/18/2025 | 09/15/2026 |
| Tarter Krinsky & Drogin LLP | 09/09/2025, 09/10/2025 | 09/15/2026 |
Independent Cybersecurity Audits
EmailMeNow domain audits on September 15, 2026 scored 3 filer domains in this batch.
2 of 3 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
Leggett & Platt, Incorporated Employee Benefits Plan (leggett.com) leads at 63% overall; Alliance Environmental Group, LLC (allianceenvironmentalgroup.com) scores 27%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| Alliance Environmental Group, LLC | allianceenvironmentalgroup.com | 27% | 0% | 15% | 37% | Weakest |
| Leggett & Platt, Incorporated Employee Benefits Plan | leggett.com | 63% | 65% | 15% | 70% | Above Average |
| Tarter Krinsky & Drogin LLP | tarterkrinsky.com | 53% | 35% | 50% | 70% | Average |
Audit links: allianceenvironmentalgroup.com · leggett.com · tarterkrinsky.com
Website stack note
- Alliance Environmental Group, LLC (
allianceenvironmentalgroup.com): WordPress behind current (running 3.7.1; latest 7.1.2); WordPress: WordPress core older than 6.4 has multiple known security fixes in later releases; upgrade promptly.
Related trackers
- All state AG trackers
- Texas OAG YTD dashboard
- California AG breach list
- Washington AG tracker
- Healthcare AG breach tracker
- Washington healthcare breaches (2026)
- Washington law firm breaches (2026)
- CA September roundup
- TX September roundup
- WA September roundup
- TX Parks breach
- Have I Been Pwned
- HIBP September roundup
- Breach data week (September)
- HHS OCR September roundup
- SEC 8-K September roundup
- Monitoring guide
Source: California AG — Data Breach List