About

About BreachRecords

BreachRecords is a BreachScout product. It lists breach notices posted by regulators and cybersecurity incidents disclosed by companies, per organization, from public records, so that the documented history of an organization, a vendor or a supplier can be read in one place with its sources.

What the site holds

Entries from the breach portal of the U.S. Department of Health and Human Services (HHS), cybersecurity incident disclosures filed with the Securities and Exchange Commission (SEC) on Form 8-K, and, as they are added, the breach notice lists state attorneys general publish. Each record names its source, the source's date and the date BreachRecords observed it. The sources page lists each source with its license and the dates its records cover.

What the site does

It reads public sources, archives every document it reads, groups the entries about one event into a record, matches the organization named to a shared directory, and lists the record once a reviewer approves it. It reports what the sources state and makes no finding of its own. The methodology and how we report pages set out the rules.

Who runs it

BreachScout operates the site. The same directory of organizations serves BreachScout's other sites. Questions, corrections and requests from the organizations named reach the team through the correction form on every record page and the contact page. We acknowledge every request within two business days.

Reuse

The records are drawn from public sources whose terms are listed on the sources page. Cite the record page and the source it names. Bulk exports and an API are planned; until then, the pages are the interface.

Records reflect source filings as of the dates shown. BreachRecords is not a regulator.