.png)
WCIRB California Data Breach Lawsuit Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Workers Compensation Insurance Rating Bureau of California data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Workers Compensation Insurance Rating Bureau of California
The Workers Compensation Insurance Rating Bureau of California (WCIRB) is a private, nonprofit association that plays a role in California’s workers’ compensation insurance system. Established in 1915, WCIRB is responsible for collecting and analyzing vast amounts of data related to workers’ compensation claims, employer payroll and insurance premiums. This information helps inform regulatory bodies and supports the fair operation of the insurance marketplace.
WCIRB develops and maintains industry classification codes that insurers use to categorize employers, which directly impacts insurance premium calculations. The bureau also proposes advisory pure premium rates, which are submitted to the California Insurance Commissioner for review. The organization is funded by membership fees, premium assessments and service fees, with no state money used for its operations.
What happened?
On or about July 9, 2025, WCIRB detected a network security incident involving unauthorized access to one of its third-party systems, Box.com. An investigation determined that an unauthorized actor acquired certain personal information during the incident.
Data mining efforts concluded on Sept. 18, 2025. WCIRB began notifying affected individuals by mail in Oct. 2025. The total number of affected workers has not been released, but may include thousands of individuals employed in the state of California.
Possible exposed information
- Name
- Address
- Date of birth
- Social Security number
- Employment information
- Health information
- Medical records
- Worker's compensation claim information
The breach was also reported to the California Attorney General’s office on Oct. 13, 2025.
Your Rights and Next Steps
If you were notified that your information was part of this breach, there are several important steps you can take to protect yourself and understand your rights:
- Identity theft protection services: Sign up for the free IDX identity theft protection services offered by WCIRB
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
You May Be Entitled to Compensation
If your personal information was exposed in the WCIRB data breach, you may be entitled to compensation, which could include reimbursement for out-of-pocket expenses, time spent addressing the breach, or payment for emotional distress. Lawyers are investigating potential claims on behalf of affected individuals.
Complete the form below to joining a lawsuit investigation and pursue monetary damages.
.svg)