About Workers’ Compensation Insurance Rating Bureau of CA
The Workers’ Compensation Insurance Rating Bureau of California (WCIRB) is a non-profit organization based in San Francisco, CA. The WCIRB is a licensed rating organization that provides actuarially based information and research related to workers’ compensation insurance. On July 9, 2025, the organization experienced an external system breach that affected 2,766 individuals, including one resident from Maine. The breach was discovered on October 7, 2025, and involved unauthorized access to third-party systems.
What Happened
On or about July 9, 2025, we detected a network security incident, in which an unauthorized entity accessed one of our third-party systems, Box.com. We quickly engaged third-party forensic specialists to confirm the security of our Box.com environment and investigate the extent of any unauthorized activity. Our investigation determined an unauthorized third party acquired certain individual personal information during this incident. Data mining efforts concluded on September 18, 2025. Further address verification was completed on October 7, 2025.
The breach affected individuals whose personal information was stored on a third-party system, Box.com. The breach was detected on July 9, 2025, and involved unauthorized access to personal information.
Next Steps
Affected users are advised to remain vigilant and monitor their accounts for any suspicious or unusual activity. They should consider placing a security freeze on their credit reports to prevent unauthorized credit, loans, and services from being approved in their names. Additionally, users have the right to obtain a copy of their credit report free of charge and can file a police report if they experience identity fraud. For more detailed information, users can contact IDX, the identity protection service provider, with any questions.
Identity Theft Protection Services
Impacted individuals have been offered identity theft protection services through IDX for a duration of 12 months. These services include credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed ID theft recovery services. IDX will assist in resolving issues if an individual’s identity is compromised. Affected individuals are encouraged to enroll in these free identity protection services by contacting IDX and using the provided enrollment code before the deadline of January 27, 2026.