Workers’ Compensation Insurance Rating Bureau of California Data Breach

On or about July 9, 2025, Workers’ Compensation Insurance Rating Bureau of California (“WCIRB”) detected a network security incident involving unauthorized access to one of its third-party systems, Box.com. WCIRB immediately engaged forensic specialists to investigate and confirm the security of its environment. The investigation determined that an unauthorized third party acquired certain personal information during the incident. Data mining efforts concluded on September 18, 2025, and address verification was completed on October 7, 2025.

While there is no evidence that personal information has been misused, WCIRB is notifying affected individuals out of caution and offering identity theft protection services through IDX, which include credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services.

WCIRB is a licensed rating organization that provides actuarial data and research related to California’s workers’ compensation insurance system.

Following the breach, WCIRB implemented enhanced security measures and continues to monitor its systems.

If you received a Data Breach notification letter from WCIRB, it confirms that your information was potentially impacted.

What information is involved in the Workers’ Compensation Insurance Rating Bureau of California Data Breach?

Compromised information may include:

Your Personally Identifiable Information (PII) includes details that can be used to identify you. Organizations are legally obligated to safeguard this data, and failure to do so can result in statutory fines and other legal consequences. If PII is stolen, it may be exploited by criminals to commit identity fraud.

If your data has been exposed in a breach, one of the most effective steps you can take is to enroll in credit and identity monitoring services promptly.

Residents of California benefit from additional privacy protections under the California Consumer Privacy Act (CCPA), which grants enhanced rights regarding personal data. Additionally, California residents also benefit from medical privacy protections under the Confidentiality of Medical Information Act (CMIA), which specifically grants enhanced protections for confidential medical data.

If you received a NOTICE OF DATA BREACH letter from WCIRB, your personal information may be at risk. This type of data can be exploited by identity thieves to commit fraud and other crimes.

Contact the Data Breach Lawyers at Emery | Reddy, PC for a Free Case Review today.