Find the company that sent your data breach notification letter.

This directory collects public, state-reported data breach notification filings and pairs each one with a plain-English guide written for the people who received the letter. Many states require companies to file a notice with a state attorney general or regulator when personal information is exposed, and those filings are public records. We surface those records here, organized by company, so you can look up the organization named on your letter and read what is known about the incident, what data categories were involved, and what the company says you should do next.

To use the directory, find the company that sent you the notice in the alphabetical list below, then open that company's guide. When you read your own letter, confirm a few specifics: the name of the organization sending it, a phone number or website you can verify independently, the types of personal data the company says were affected, any deadline it gives you for enrolling in free credit monitoring, and clear instructions for accepting or declining offered services. If the letter asks for sensitive information up front, pressures you to act immediately, or cannot be verified through the company's official channels, review our guide to spotting scam breach notices before you respond.

A company's appearance in this archive simply means a public breach notice was filed; it does not by itself establish that your identity was stolen or that you are owed compensation. If you want practical next steps after receiving a letter, start with what to do after a data breach, and consider placing a credit freeze to limit new-account fraud while you assess your risk.