Data Breach Notification Reports

View Data Breach Notification Reports, which include how many breaches are reported each year and the number of affected residents.

In Massachusetts, companies are legally required to report data breaches affecting residents' private data to the Office of Consumer Affairs and Business Regulation (OCABR). The data on this page summarizes those reports. The data begins in 2007, when the law went into effect.

In addition to the summary table, you can download reports for each year in which data is broken out by company and what kind of data was affected. 

If you're interested in the details of a particular data breach notification, you can request a copy of the notification via a public records request

 

Year       Total # of breaches # of MA Residents Affected
2007 (Nov-Dec)3217,503
2008428692,736
2009441357,900
20104741,018,497
20116241,167,160
20121,130325,867
20131,9471,193,970
20141,659360,793
20151,8371,345,430
20162,002195,052
20171,8893,377,646
20181,835442,941
20191,909609,006
20202,1881,087,591
20212,4881,861,422
20221,9361,899,465
20232,4296,936,499
20241,0121,048,231

 

Disclosure: The number of residents affected may go up as companies determine the total number of impacted residents.

 

You may also submit a public record request for data breach notifications to the Office of the Attorney General.

Table of Contents

Help Us Improve Mass.gov  with your feedback

Please do not include personal or contact information.
Feedback