Latest / California / October 2023

NASCO

NASCO notified California AG on Oct 27, 2023 of a data breach, which occurred on May 30, 2023. Data exposed: Postal address.

All 3 filings by NASCO, state by state · Case file (dates, days to notice against the statute, what the letter offers, prior incidents)

Organization
NASCO
Source
California AG · source record
Date reported
Oct 27, 2023
Date(s) of breach
Tuesday, May 30, 2023
Residents affected
Not published by this source
Data exposed
Postal address
Notice letter
Sample notice (PDF)
Discovered
Jul 12, 2023, as stated in the letter
"When NASCO learned of this incident on July 12, 2023, it promptly took steps to secure its systems, launched an investigation with the support of a leading cybersecurity firm and notified law enforcement authorities."
Days to notice
107 days from discovery (Jul 12, 2023) to the California record (Oct 27, 2023). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82). Over the statutory period
Offered in the letter
24 months of credit or identity monitoring through Experian
Third party
The letter attributes the incident to a vendor or service provider
First seen by BreachTally
2026-10-30 15:56 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.

First seen by BreachTally at 15:56 UTC on Oct 30, 2026. New filings reach paid subscribers within 30 minutes of the agency posting, with the count, the data exposed and the letter. Start a 14-day free trial. We email you two days before the first charge and you cancel in one click.
Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.

Other filings by NASCO

OrganizationSourceStateReportedResidents affectedData exposed
NASCO California AG CA Jan 10, 2024 Not published Postal address
NASCO Oregon DOJ OR Oct 27, 2023 804,862 Not stated

Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.