Wilmer Cutler Pickering Hale and Dorr
Disclosed Jul 10, 20262 months ago911,658 affectedConfirmed
What is known
| People affected | 911,658 (as reported by the organization) |
|---|---|
| Disclosed | Jul 10, 2026 |
| Discovered | May 8, 2026 |
| Happened | May 8, 2026 |
| Attack | Lost or stolen device |
| Data exposed | Names, Social Security numbers, Dates of birth, Addresses |
| Sector | Retail · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Wilmer Cutler Pickering Hale and Dorroag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Wilmer Cutler Pickering Hale and Dorratg.wa.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Wilmer Cutler Pickering Hale and Dorrattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Wilmer Cutler Pickering Hale and Dorrjustice.oregon.gov · Official notice | Official notice |
| Texas Attorney General data security breach report BR-0005268: Wilmer Cutler Pickering Hale and Dorroag.my.site.com · Official notice | Official notice |
| Vermont Attorney General breach report: Wilmer Cutler Pickering Hale & Dorrago.vermont.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Jul 10 | |
| Vermont AGresidents of VT | Jul 10 | 11 |
| Washington AGresidents of WA | Jul 15 | 17,253 |
| Oregon DOJresidents of OR | Aug 5 | 35,218 |
| Delaware DOJresidents of DE | Aug 12 | 3,138 |
| Texas AGresidents of TX | Aug 21 | 80,528 |
History of this record
- 2026-09-25 · source: empty to https://ago.vermont.gov/categories/security-breach-notices · backfill source
- 2026-09-25 · sector: other to retail · backfill source
- 2026-09-25 · data_types: ["names","ssn"] to ["names","ssn","dob","addresses"] · backfill source
- 2026-09-25 · data_types: [] to ["names","ssn"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 911658 · backfill source
- 2026-09-25 · attack: unknown to lost-device · backfill source
- 2026-09-25 · discovered: empty to 2026-05-08 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.