States
10 US state attorney general breach-notification registers ingested on Breach Census, each with its own notice count.
Several US states publish their own register of data-breach notifications filed with the state attorney general (or, in Hawaii's case, the Office of Consumer Protection). Each state sets its own statute, its own threshold for when a filing is required, and its own definition of what the published affected-count actually counts — see each state's own page for its specifics.
| State | Notices on file |
|---|---|
| California | 5,327 |
| Delaware | 925 |
| Hawaii | 55 |
| Iowa | 340 |
| Massachusetts | 15,140 |
| New Hampshire | 87 |
| Texas | 718 |
| Vermont | 404 |
| Washington | 1,675 |
| Wisconsin | 230 |
Questions and answers
Are these all the US states with a breach-notification law?
No. Most US states require breach notification, but only the states listed here publish a register Breach Census currently ingests directly.
What does a state's notice count mean?
It is the number of state_ag_notice filings on file for that state that are tied to a confirmed, visible incident on this site — not every filing that state has ever received, only the ones ingested here.