Dapeer Law, P.A., a top-rated class action law firm, is investigating the Workers Compensation Insurance Rating Bureau of California data breach. If you received notice that your information was exposed during this breach, you may be entitled to compensation. It's free to join our investigation to see if we can help you recover.

Workers Compensation Insurance Rating Bureau of California Data Breach Lawsuit Investigation

The Workers Compensation Insurance Rating Bureau of California (WCIRB) has confirmed a cyber-security incident involving its third-party Box.com environment. If you received a breach notice, you may be entitled to free identity-theft protection and potential compensation. Contact us to learn how to join the ongoing legal investigation.

Timeline of the WCIRB Breach

July 9, 2025: WCIRB detected unauthorized access to its Box.com system and began an investigation.
September 18, 2025: Forensic review and data-mining efforts concluded.
October 13, 2025: Incident reported to the California Attorney General.
October 28, 2025: Last public update on the investigation.

What Happened

An unauthorized third party gained access to WCIRB’s Box.com account. Forensic specialists were engaged immediately to secure the environment and assess the scope of the intrusion. The investigation determined that certain personal information was exfiltrated during the period from July 9 through September 18 2025.

Information Potentially Exposed

According to WCIRB’s notice, the data set may have included:

First and last name
<<additional data elements to be listed by WCIRB>>

Company Response

WCIRB reports taking the following remedial and protective steps:

Engaged third-party forensic specialists to investigate the incident.
Confirmed the security of the Box.com environment.
Enhanced internal security measures and reviewed policies and procedures.
Offered complimentary identity-theft protection services through IDX.

Download Official Breach Notice (PDF)

What Affected Individuals Should Do Now

Even if there is no evidence of misuse, proactive steps can reduce future risk:

Enroll in the free IDX identity-protection service using the code provided in your notice.
Review your account statements and credit reports for unfamiliar activity.
Consider placing a fraud alert or credit freeze with the major credit bureaus.
Report any suspected identity theft to law enforcement and the Federal Trade Commission.

Company Overview

Workers Compensation Insurance Rating Bureau of California (WCIRB) is a private, nonprofit association whose mission is to collect, analyze, and compile information for the workers’ compensation insurance industry in California.

Website: wcirb.com
Headquarters: One Montgomery Street, Suite 400, San Francisco, CA, USA
Year Founded: 1915
Industry: Insurance / Workers’ Compensation
Contact: wcirb.com/about-us/contact-us
Privacy Policy: view policy

Frequently Asked Questions

What happened in the Workers Compensation Insurance Rating Bureau of California data breach?

An unauthorized party accessed WCIRB’s Box.com files between July 9 and September 18 2025, potentially downloading personal information.

What information was exposed by the WCIRB breach?

The notice states that first and last names—and possibly additional data fields specified in individual letters—were compromised.

Is WCIRB offering free identity-protection services?

Yes. WCIRB is providing complimentary IDX identity-theft protection, which includes credit monitoring and recovery services.

How long did the unauthorized access last?

The intrusion window ran from July 9 to September 18 2025.

Can I join a class-action lawsuit against WCIRB?

Possibly. Attorneys are evaluating claims on behalf of individuals whose data was compromised. Contact us to discuss your legal options.