State law requires businesses and government agencies to notify consumers when a data breach might have put their personal information at risk. A bill passed in 2012 also requires companies to report a breach to the attorney general when more than 500 consumers' information has been accessed.
The report's description of 131 breaches of consumer information marks the first time the information has been made available to the public.
California law requires companies to report breaches of information whether the breach was malicious or unintentional.
The report details when each breach occurred and what private information was affected. The list of organizations that experienced data breaches in 2012 includes the California Department of Health Care Services, the state Department of Child Supportive Services, American Express and State Farm Insurance.
