Workers' Compensation Insurance Rating Bureau of California

Workers' Compensation Insurance Rating Bureau of California (WCIRB) notified individuals that an unauthorized third party accessed their Box.com system on or about July 9, 2025. The incident involved the acquisition of personal information, including names and potentially other data elements. WCIRB engaged forensic specialists and is offering identity theft protection services. The breach date listed on the CA OAG form is October 9, 2025.

Workers' Compensation Insurance Rating Bureau of California (WCIRB) notified individuals that an unauthorized third party accessed their Box.com system on or about July 9, 2025. The incident involved the acquisition of personal information, including names. WCIRB engaged forensic specialists and is offering identity theft protection services. The breach was contained, and no evidence of misuse was found.

Workers' Compensation Insurance Rating Bureau of CA reported a data breach to the Indiana Attorney General. The breach occurred on 2025-07-09 and was reported on 2025-10-27. 1 Indiana residents were affected. 2,766 individuals affected in total.

Workers’ Compensation Insurance Rating Bureau of CA reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-10-27. 2 Massachusetts residents were affected.

Workers’ Compensation Insurance Rating Bureau of California reported an external system breach (hacking) of its third-party Box.com environment on July 9, 2025. The incident affected 2,766 individuals, including 1 Maine resident. Personal information (names) was accessed. The breach was discovered on October 7, 2025, and notifications were sent on October 27, 2025. Identity theft protection services were offered.

Workers’ Compensation Insurance Rating Bureau of California notified consumers of a data breach involving its third-party cloud storage provider, Box.com. An unauthorized third party accessed the system between July 9, 2025, and September 18, 2025, potentially obtaining names. The company engaged forensic investigators, secured the environment, and offered identity theft protection services to affected individuals.

Workers Compensation Insurance Rating Bureau of California notified NH AG of a July 9, 2025 incident where an unauthorized entity accessed its Box.com account. One NH resident's personal info (name) was acquired. WCIRB engaged forensic specialists, secured the environment, and offered 12 months of credit monitoring. No evidence of misuse found.

Workers’ Compensation Insurance Rating Bureau of California notified individuals of a July 9, 2025, security incident involving unauthorized access to a third-party Box.com environment. An unauthorized third party accessed personal information (names) of individuals. The company engaged forensic specialists, confirmed the environment's security, and offered 12-24 months of identity theft protection services through IDX. Data mining concluded September 18, 2025.

Workers Compensation Insurance Rating Bureau of California detected unauthorized access to its third-party system, Box.com, on July 9, 2025. An unauthorized third party acquired personal information, including names. Forensic investigation concluded on September 18, 2025. The organization engaged forensic specialists, secured the environment, and is offering identity theft protection services.