Total notices in capture: 1536 Notices by reported year: {2024: 608, 2025: 565, 2026: 363} Same-period (Jan 1-Aug 24) notices: 2025=361 2026=363 change=0.6% [reported 2024] n_lag=578 (excluded: 29 no breach date, 1 unusable dates) | median=174d mean=220d p90=413d max=1320d | <=30d: 2.9% <=60d: 10.6% >180d: 48.6% >365d: 13.7% [reported 2025] n_lag=527 (excluded: 35 no breach date, 3 unusable dates) | median=186d mean=215d p90=412d max=1469d | <=30d: 4.7% <=60d: 14.4% >180d: 52.0% >365d: 16.5% [reported 2026] n_lag=337 (excluded: 26 no breach date, 0 unusable dates) | median=152d mean=219d p90=441d max=3558d | <=30d: 5.6% <=60d: 17.5% >180d: 44.8% >365d: 19.0% [all 2024-2026YTD] n_lag=1442 (excluded: 90 no breach date, 4 unusable dates) | median=174d mean=218d p90=423d max=3558d | <=30d: 4.2% <=60d: 13.6% >180d: 49.0% >365d: 16.0% [2026-reported, breach began on/after 2026-01-01 (SB446 era)] n_lag=132 (excluded: 0 no breach date, 0 unusable dates) | median=70d mean=77d p90=137d max=205d | <=30d: 13.6% <=60d: 41.7% >180d: 3.0% >365d: 0.0% [2026-reported, breach began before 2026-01-01 (legacy incidents)] n_lag=205 (excluded: 0 no breach date, 0 unusable dates) | median=261d mean=311d p90=476d max=3558d | <=30d: 0.5% <=60d: 2.0% >180d: 71.7% >365d: 31.2% Top repeat notifiers (normalized exact name, 2024-2026YTD): 10x episource, llc 9x conduent business services, llc 9x financial business and consumer solutions, inc. 7x healthequity, inc. 6x infosys mccamish systems llc 5x alera group, inc. 5x blue shield of california 5x kelly & associates insurance group, inc. 5x la financial federal credit union 4x situsamc holdings corporation 4x young consulting llc 4x southeast series of lockton companies, llc (lockton) 4x harvard pilgrim health care Breach-date signatures shared by 5+ distinct organizations (vendor-cascade indicator): 32 orgs | breach date(s): 02/21/2024 9 orgs | breach date(s): 12/13/2024, 12/16/2024 8 orgs | breach date(s): 11/01/2024 8 orgs | breach date(s): 10/29/2023 6 orgs | breach date(s): 11/01/2024, 10/02/2025 6 orgs | breach date(s): 12/28/2021, 01/08/2022 5 orgs | breach date(s): 05/30/2023