States That Publish Data Breach Lists: interactive infographic

All 50 states, the District of Columbia, Guam, Puerto Rico and the Virgin Islands have enacted data breach notification laws. The first data breach law was passed in 2002 in California, and in 2018 the final two states, South Dakota and Alabama, passed their data breach laws.

Some states require reporting of breaches to the state Attorney General. Of those states, currently 15 publish a list or a database of the breaches affecting their state. Click the green states on the map to explore the data breaches in that state.

Click on a state:


States That Publish Data Breach Lists:

As of January 2020