California’s Attorney General added 5 new data breach notices to its public list on September 24, 2026, according to the California AG Data Breach List.
Unlike Texas and Washington, California’s public list does not publish a residents-affected count — so this roundup tracks incident visibility and reporting dates, not population impact. For affected-resident totals, see our Texas OAG breach tracker.
September month-to-date now totals 41 notices on the California list through September 24, 2026.
Notices Reported September 24, 2026
| Organization | Breach Date(s) (if known) | Reported |
|---|---|---|
| 5Star Life Insurance Company | 11/13/2025 | 09/24/2026 |
| Blanchard Training & Development, Inc. | 03/03/2026, 03/04/2026 | 09/24/2026 |
| HILT-Trust 2020-A and its underlying trusts and affiliates (“HILT”) | 07/23/2026 | 09/24/2026 |
| NSE Insurance Agencies | 11/06/2025 | 09/24/2026 |
| Peña and Bromberg | 05/07/2026 | 09/24/2026 |
Independent Cybersecurity Audits
EmailMeNow domain audits on September 24, 2026 scored 5 filer domains in this batch.
5 of 5 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver.
NSE Insurance Agencies (nseinsurance.com) leads at 73% overall; HILT-Trust 2020-A and its underlying trusts and affiliates (“HILT”) (hilt.com) scores 23%.
Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.
| Organization | Domain | Overall | Identity | Transport | Website | Risk |
|---|---|---|---|---|---|---|
| 5Star Life Insurance Company | 5starlifeinsurance.com | 57% | 35% | 15% | 92% | Average |
| Blanchard Training & Development, Inc. | blanchard.com | 45% | 20% | 15% | 70% | Below Average |
| HILT-Trust 2020-A and its underlying trusts and affiliates (“HILT”) | hilt.com | 23% | 0% | 15% | 37% | Weakest |
| NSE Insurance Agencies | nseinsurance.com | 73% | 75% | 15% | 92% | Good |
| Peña and Bromberg | penabromberg.com | 24% | 0% | 15% | 40% | Weakest |
Audit links: 5starlifeinsurance.com · blanchard.com · hilt.com · nseinsurance.com · penabromberg.com
Website stack note
- 5Star Life Insurance Company (
5starlifeinsurance.com): WordPress behind current (running 3.7.1; latest 7.1.2); WordPress: WordPress core older than 6.4 has multiple known security fixes in later releases; upgrade promptly. - HILT-Trust 2020-A and its underlying trusts and affiliates (“HILT”) (
hilt.com): Bootstrap: Bootstrap 3/4 are past primary vendor support; upgrade to Bootstrap 5 when practical (often theme-bundled).
Related trackers
- All state AG trackers
- Texas OAG YTD dashboard
- California AG breach list
- Washington AG tracker
- Healthcare AG breach tracker
- Washington healthcare breaches (2026)
- Washington law firm breaches (2026)
- CA September roundup
- TX September roundup
- WA September roundup
- TX Parks breach
- Have I Been Pwned
- HIBP September roundup
- Breach data week (September)
- HHS OCR September roundup
- SEC 8-K September roundup
- Monitoring guide
Source: California AG — Data Breach List