Yellow
Disclosed Jun 26, 20263 months ago258,781 affectedConfirmed
What is known
| People affected | 258,781 (as reported by the organization) |
|---|---|
| Disclosed | Jun 26, 2026 |
| Discovered | Mar 27, 2025 |
| Happened | Mar 27, 2025 |
| Attack | Not stated |
| Data exposed | Social Security numbers, Government IDs, Health, Insurance, Payment cards, Financial, Dates of birth, Names |
| Sector | Retail · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Yellowoag.ca.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Yellowjustice.oregon.gov · Official notice | Official notice |
| Texas Attorney General data security breach report BR-0005145: Yellowoag.my.site.com · Official notice | Official notice |
| Indiana Attorney General 2026 data breach report: Yellowin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Jun 26 | |
| Indiana AGresidents of IN | Jun 26 | 6,191 |
| Texas AGresidents of TX | Jun 30 | 13,183 |
| Oregon DOJresidents of OR | Jul 8 | 258,498 |
History of this record
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-7_2026.pdf · backfill source
- 2026-09-25 · sector: other to retail · backfill source
- 2026-09-25 · data_types: [] to ["ssn","government-id","health","insurance","payment-card","financial","dob","names"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 258781 · backfill source
- 2026-09-25 · discovered: empty to 2025-03-27 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.