Latest / California / September 2024
TIAA
TIAA notified California AG on Sep 6, 2024 of a data breach, which occurred on Oct 29, 2023.
All 2 filings by TIAA, state by state · Case file (dates, days to notice against the statute, what the letter offers, prior incidents)
- Organization
- TIAA
- Source
- California AG · source record
- Date reported
- Sep 6, 2024
- Date(s) of breach
- Sunday, October 29, 2023
- Residents affected
- Not published by this source
- Data exposed
- Not stated in the source listing
- Notice letter
- Sample notice (PDF)
- Discovered
- Nov 2, 2023, as stated in the letter"On November 2, 2023, IMS became aware of the incident and retained a third-party cybersecurity expert to investigate and assist with containment."
- Days to notice
- 309 days from discovery (Nov 2, 2023) to the California record (Sep 6, 2024). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82). Over the statutory period
- Offered in the letter
- credit or identity monitoring through Experian
- Third party
- The letter attributes the incident to a vendor or service provider
- First seen by BreachTally
- 2026-10-30 15:39 UTC
Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.
Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.
Other filings by TIAA
| Organization | State | Reported | Residents affected |
|---|---|---|---|
| TIAA | MA | Sep 25, 2026 | 13 |
Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.