LatestStatesCompaniesPricingAPIData Start free trial

Latest / California / November 2026

Cotton Incorporated

Cotton Incorporated notified California AG on Nov 2, 2026 of a data breach, which occurred on Oct 15, 2026. Data exposed: Usernames / passwords, Email address, Postal address, Name.

Case file (dates, days to notice against the statute, what the letter offers, prior incidents)

Organization
Cotton Incorporated
Source
California AG · source record
Date reported
Nov 2, 2026
Date(s) of breach
Friday, September 18, 2026Thursday, October 15, 2026
Residents affected
Not published by this source
Data exposed
Usernames / passwords Email address Postal address Name
Notice letter
Sample notice (PDF)
Days to notice
18 days from the end of the breach window (Oct 15, 2026, no discovery date in the letter) to the California record (Nov 2, 2026). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82).
Third party
The letter attributes the incident to a vendor or service provider
First seen by BreachTally
2026-11-03 17:01 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.

First seen by BreachTally at 17:01 UTC on Nov 3, 2026. New filings reach paid subscribers within 30 minutes of the agency posting, with the count, the data exposed and the letter. Start a 14-day free trial. We email you two days before the first charge and you cancel in one click.
Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.

Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.