US-CA — Unauthorized Access/Disclosure
“On September 1, 2026, we identified unusual activity in our Microsoft 365 system.”
Timeline
- September 1, 2026Press coverage Press
press report (acknowledged): Suspicious activity was identified on September 1, 2026
source - October 30, 2026Reported to regulator Regulator
CA AG breach notification: an unknown number of California residents affected
source - UndatedPress coverage Press
press report (individuals_notified): the affected individuals have been offered complimentary credit monitoring and identity theft protection services
source
What a California notice means
Governed by Cal. Civ. Code §1798.82. A copy of the notification must be sent to the Attorney General when a single breach requires notifying more than 500 California residents.
Note: no affected-count is published on this register.