{
 "snapshot": "2026-10-03",
 "source": "Washington State Attorney General, data.wa.gov datasets sb4j-ca4h and padd-mby7",
 "notices": 1675,
 "first_submitted": "2015-08-11",
 "last_submitted": "2026-09-11",
 "latest_full_year": 2026,
 "recent_years": [
  2024,
  2026
 ],
 "recent_notices": 705,
 "total_residents": 49069870,
 "median_residents": 1888.0,
 "by_year": {
  "2016": {
   "notices": 39,
   "cyberattack_pct": 48.7,
   "residents": 553912
  },
  "2017": {
   "notices": 77,
   "cyberattack_pct": 66.2,
   "residents": 2858566
  },
  "2018": {
   "notices": 63,
   "cyberattack_pct": 58.7,
   "residents": 3515596
  },
  "2019": {
   "notices": 65,
   "cyberattack_pct": 73.8,
   "residents": 393283
  },
  "2020": {
   "notices": 60,
   "cyberattack_pct": 63.3,
   "residents": 1071799
  },
  "2021": {
   "notices": 286,
   "cyberattack_pct": 86.4,
   "residents": 6510969
  },
  "2022": {
   "notices": 159,
   "cyberattack_pct": 67.3,
   "residents": 4833519
  },
  "2023": {
   "notices": 181,
   "cyberattack_pct": 63.0,
   "residents": 4581008
  },
  "2024": {
   "notices": 295,
   "cyberattack_pct": 76.6,
   "residents": 12120062
  },
  "2025": {
   "notices": 212,
   "cyberattack_pct": 72.2,
   "residents": 8567575
  },
  "2026": {
   "notices": 198,
   "cyberattack_pct": 70.7,
   "residents": 3798885
  },
  "2027": {
   "notices": 40,
   "cyberattack_pct": 67.5,
   "residents": 264696
  }
 },
 "cause_pct": {
  "Cyberattack": 72.1,
  "Unauthorized Access": 22.5,
  "Theft or Mistake": 5.4
 },
 "cause_pct_recent": {
  "Cyberattack": 73.6,
  "Unauthorized Access": 23.1,
  "Theft or Mistake": 3.3
 },
 "cyberattack_type_pct": {
  "Ransomware": 49.0,
  "Malware": 18.6,
  "Other": 13.9,
  "Phishing": 9.3,
  "Unclear/unknown": 7.6,
  "Skimmers": 1.6
 },
 "cyberattack_type_pct_recent": {
  "Ransomware": 58.4,
  "Other": 21.6,
  "Phishing": 7.7,
  "Malware": 7.5,
  "Unclear/unknown": 3.9,
  "Skimmers": 1.0
 },
 "industry_counts": {
  "Business": 757,
  "Health": 332,
  "Finance": 265,
  "Education": 138,
  "Non-Profit/Charity": 125,
  "Government": 58
 },
 "industry_pct_recent": {
  "Business": 41.8,
  "Health": 23.8,
  "Finance": 19.0,
  "Education": 8.5,
  "Non-Profit/Charity": 4.0,
  "Government": 2.8
 },
 "business_subtypes_top": {
  "Other": 174,
  "Retail": 148,
  "Hospitality": 57,
  "Professional Services": 57,
  "Manufacturing": 49,
  "Software": 42,
  "Legal": 35,
  "Consumable": 24,
  "Entertainment": 24,
  "Construction": 20,
  "Clothing": 20,
  "Web Services": 14,
  "Transportation": 12,
  "Human Resources": 12,
  "Telecommunications": 11
 },
 "size_distribution": {
  "501 to 1,000": 483,
  "1,001 to 5,000": 651,
  "5,001 to 10,000": 155,
  "10,001 to 50,000": 225,
  "50,001 to 100,000": 52,
  "100,001+": 72
 },
 "timing_median_days": {
  "daystoidentifybreach": 16.0,
  "daystocontainbreach": 0.0,
  "daysbreachlifecycle": 20.5,
  "daysofexposure": 10.0,
  "dayselapsedbeforenotification": 68.0
 },
 "timing_median_days_recent": {
  "daystoidentifybreach": 6.0,
  "daystocontainbreach": 0.0,
  "daysbreachlifecycle": 8.0,
  "daysofexposure": 4.0,
  "dayselapsedbeforenotification": 100.0
 },
 "pct_discovered_in_progress": 52.5,
 "ag_notice_post_2020": {
  "n": 1377,
  "over_30_days_pct": 82.8,
  "median_days": 78,
  "p75_days": 166,
  "over_30_by_industry_pct": {
   "Finance": 83.5,
   "Business": 85.1,
   "Government": 71.4,
   "Health": 89.2,
   "Non-Profit/Charity": 65.5,
   "Education": 75.8
  },
  "buckets_pct": {
   "30 days or less": 17.2,
   "31 to 60 days": 25.1,
   "61 to 90 days": 13.1,
   "91 to 180 days": 22.9,
   "More than 180 days": 21.7
  }
 },
 "pct_out_of_state_entities": 70.7,
 "entities_with_state": 1036,
 "info_type_pct_of_notices": {
  "Name": 98.9,
  "Full Date of Birth": 64.9,
  "Social Security Number": 62.8,
  "Financial & Banking Information": 45.6,
  "Other": 37.8,
  "Medical Information": 36.8,
  "Driver's License or Washington ID Card Number": 32.5,
  "Health Insurance Policy or ID Number": 28.2,
  "Passport Number": 14.2,
  "Username and Password/Security Question Answers": 8.2,
  "Email Address and Password/Security Question Answers": 7.4,
  "Student ID Number": 5.0,
  "Military ID Number": 2.6,
  "Biometric Data": 2.0,
  "Unique Private Key (e.g. used to authenticate or sign an electronic record)": 1.3,
  "Protected Health Information owned or licensed by a HIPAA covered entity": 1.0
 },
 "info_notices": 1666,
 "cause_pct_by_industry": {
  "Finance": {
   "Cyberattack": 64.5,
   "Unauthorized Access": 29.4,
   "Theft or Mistake": 6.0
  },
  "Business": {
   "Cyberattack": 73.2,
   "Unauthorized Access": 22.9,
   "Theft or Mistake": 4.0
  },
  "Government": {
   "Cyberattack": 60.3,
   "Unauthorized Access": 31.0,
   "Theft or Mistake": 8.6
  },
  "Health": {
   "Cyberattack": 72.0,
   "Unauthorized Access": 21.1,
   "Theft or Mistake": 6.9
  },
  "Non-Profit/Charity": {
   "Cyberattack": 88.0,
   "Unauthorized Access": 8.0,
   "Theft or Mistake": 4.0
  },
  "Education": {
   "Cyberattack": 71.0,
   "Unauthorized Access": 20.3,
   "Theft or Mistake": 8.7
  }
 },
 "ransomware_count_by_industry": {
  "Finance": 74,
  "Business": 231,
  "Government": 15,
  "Health": 114,
  "Non-Profit/Charity": 85,
  "Education": 73
 },
 "pct_5000_or_fewer": 69.3,
 "notices_with_size": 1643,
 "largest": [
  {
   "name": "Equifax, Inc.",
   "residents": 3243664,
   "year": 2018,
   "cause": "Cyberattack",
   "type": "Other"
  },
  {
   "name": "Change Healthcare Inc.",
   "residents": 3121209,
   "year": 2025,
   "cause": "Cyberattack",
   "type": "Ransomware"
  },
  {
   "name": "Comcast Cable Communications LLC",
   "residents": 3100608,
   "year": 2024,
   "cause": "Cyberattack",
   "type": "Other"
  },
  {
   "name": "T-Mobile USA",
   "residents": 2079648,
   "year": 2022,
   "cause": "Cyberattack",
   "type": "Malware"
  },
  {
   "name": "Fred Hutchinson Cancer Center",
   "residents": 1694184,
   "year": 2024,
   "cause": "Cyberattack",
   "type": "Other"
  },
  {
   "name": "ACTIVEOutdoors",
   "residents": 1449645,
   "year": 2017,
   "cause": "Unauthorized Access",
   "type": ""
  }
 ],
 "recent_window": {
  "from": "2023-07-24",
  "to": "2026-07-23"
 },
 "p75_days_to_identify": 116.0
}