Did Workers Compensation Insurance Rating Bureau of California have a data breach?

In plain terms

The Workers Compensation Insurance Rating Bureau of California (WCIRB) reported a data breach to the California Attorney General. This incident, occurring on October 9, 2025, involved unauthorized access to personal information and is currently under investigation. Individuals who received a notification letter should take steps to protect their data.

The Workers Compensation Insurance Rating Bureau of California (WCIRB) officially reported a data breach to the California Attorney General. This incident, which the WCIRB states occurred on October 9, 2025, involved unauthorized access to systems containing personal information. The public filing was submitted on February 21, 2026.

The WCIRB is an organization central to the state's insurance industry, managing workers' compensation data and policy information. Due to its role, it handles sensitive records related to individuals. The organization has indicated that it is currently investigating the full scope and nature of this breach.

While the specific categories of data involved and the number of affected individuals have not been detailed in the public record, the WCIRB's notification indicates that sensitive personal or professional information may have been compromised. If you received a data breach notification letter, it suggests your information was contained within the systems that were accessed without authorization.

To help protect yourself, it is widely recommended to place a fraud alert or credit freeze with the three major credit bureaus. This can help prevent new accounts from being opened in your name without your authorization. You should also carefully review all financial statements and account activity for any suspicious or unfamiliar transactions.

It is also advisable to update passwords for important online accounts, ensuring each account uses a strong and unique password. Remain vigilant for any unsolicited communications that request personal information. Promptly report any unusual activity to your financial institutions or other relevant service providers.