On July 30, 2013, Exelixis experienced a data breach due to the theft of company equipment containing sensitive personal information. The compromised data included names, addresses, birth dates, financial account numbers, and Social Security numbers of an unspecified number of individuals. While the theft occurred, there has been no confirmed evidence of unauthorized access or misuse of the stolen data as of the report by the California Office of the Attorney General on August 16, 2013. The incident highlights vulnerabilities in physical security controls, as the breach stemmed from the loss of hardware rather than a direct cyber intrusion. The potential risk remains significant given the nature of the exposed data, which could facilitate identity theft or financial fraud if exploited by malicious actors.