The Washington State Attorney General published 3 new data breach notifications on September 4, 2026, according to the Washington AG Data Breach Notifications portal. Combined, these notifications cover 11,403 Washingtonians.

The largest filing — LHC Group, Inc. — accounts for 6,602 affected Washingtonians in this batch. See the live Washington AG tracker for monthly charts.

September month-to-date now totals 5 published notifications affecting 21,921 Washingtonians through September 4, 2026.

Notifications Published September 4, 2026

Entity	Washingtonians Affected	Date Published
LHC Group, Inc.	6,602	09/04/2026
Catalyst Brands LLC	4,015	09/04/2026
Bimbo Bakeries USA (Oracle)	786	09/04/2026

Independent Cybersecurity Audits

EmailMeNow domain audits on September 4, 2026 scored 3 filer domains in this batch. 3 of 3 show 15% Transport Security or below — a recurring gap that makes spoofed breach-notification email easier to deliver. LHC Group, Inc. (lhcgroup.com) leads at 49% overall; Catalyst Brands LLC (catalystbrandstrategy.com) scores 37%.

Pattern: Scores below the 100% ideal on identity or transport still leave room for spoofed incident-response email — even when website headers score higher.

Organization	Domain	Overall	Identity	Transport	Website	Risk
LHC Group, Inc.	lhcgroup.com	49%	55%	15%	37%	Below Average
Catalyst Brands LLC	catalystbrandstrategy.com	37%	25%	15%	37%	Weak
Bimbo Bakeries USA (Oracle)	bimbobakeriesusa.com	43%	0%	15%	90%	Below Average

Audit links: lhcgroup.com · catalystbrandstrategy.com · bimbobakeriesusa.com

Source: Washington AG — Data Breach Notifications

3 New Washington AG Breach Notifications Published September 4, 2026: 11,403 Washingtonians Affected

Notifications Published September 4, 2026

Independent Cybersecurity Audits

Related trackers