The California Office of the Attorney General reported a data breach involving Central Valley Regional Center (CVRC) on October 24, 2019. The breach occurred between July 25, 2019, and August 2, 2019, potentially impacting the personal information of 11,990 California residents, including their names, Social Security numbers, and health information. CVRC offered affected individuals 12 months of complimentary credit monitoring services.

Central Valley Regional Center, Inc. (CVRC), a California-based nonprofit serving individuals with developmental disabilities, suffered a data breach due to the improper disposal of sensitive documents by a contracted janitorial service. Between March 1, 2025, and July 7, 2025, confidential records—including names, addresses, dates of birth, Social Security numbers, medical information, and other personal data—were discarded in regular trash instead of being shredded. The breach impacted documents spanning 2015 to 2025, affecting over 28,000 individuals across six counties. CVRC reported the incident to law enforcement and regulatory bodies, offering one year of free identity protection (LifeLock) and establishing a call center for affected parties. Legal investigations are underway, with potential compensation claims for victims of unauthorized exposure.