Data Breach Summary
The Workers’ Compensation Insurance Rating Bureau of California (WCIRB) has reported a data breach affecting thousands of individuals’ personal information. The breach occurred due to a hacking incident involving a third-party system, Box.com, which was exploited by unauthorized parties. This breach may have exposed sensitive data, and the company has taken immediate steps to secure their environment.
On July 9, 2025, the Workers’ Compensation Insurance Rating Bureau of California (WCIRB) detected a network security incident in which an unauthorized third-party gained access to one of their third-party systems, Box.com. This system is critical for storing and sharing sensitive data, and the breach was discovered after a routine security check. The WCIRB immediately engaged forensic experts to assess the extent of the breach and secure the compromised environment.
Following the initial detection, the WCIRB’s investigation revealed that personal information may have been acquired by the unauthorized third-party. Data mining efforts concluded on September 18, 2025, and address verification was completed by October 7, 2025. While there was no evidence of misuse of the information, the organization confirmed that unauthorized access had occurred.
The affected data involved personal information such as names, which is a significant concern for those whose data was exposed. In the aftermath, the WCIRB has taken steps to bolster its cybersecurity infrastructure and reviewed its policies to prevent future breaches.
Although the breach was external, occurring due to a third-party provider, the organization acknowledged its responsibility in safeguarding personal data. Affected individuals are being notified to help mitigate any potential risks to their information.
The breach occurred on July 9, 2025, and was discovered by WCIRB on October 7, 2025.
The breach exposed the following personal information:
If you believe you were affected by this breach, there are several steps you can take to protect your personal information:
We recommend you fill out the secure form on ClassActionU.org to get in touch with a lawyer and explore your options for taking action.
If you have received a data breach notification from Workers’ Compensation Insurance Rating Bureau of California, you may be eligible for compensation through a class action lawsuit. Data breaches can cause substantial personal and financial harm, and holding the responsible parties accountable is crucial to ensuring justice for those affected.
If you’re unsure whether you have a case, we highly recommend contacting Class Action U for a free consultation. We partner with top-notch legal representation to navigate this complex process. Joining a class action can amplify your voice and help ensure that data breaches like this are taken seriously by corporate entities.
If your data was compromised, you could be entitled to compensation for:
Loss of privacy
Time spent resolving the breach
Out-of-pocket expenses
Emotional distress
By pursuing a class action lawsuit, you not only have the opportunity to recover damages but also help hold Workers’ Compensation Insurance Rating Bureau of California, accountable potentially prompting them to strengthen their security measures. Reach out to Class Action U today to find out if you qualify for a data breach class action and learn more about the compensation you may be entitled to.