Incident · State breach notice (California AG)
Center Theatre Group Notifies Employees After EDD Filing Error Exposed Social Security Numbers
Published . By the cisonews.net Desk.
What happened and when
Center Theatre Group notified affected individuals in a notice filed with the California Attorney General and dated November 3, 2026 that personal information was involved in an incident tied to a routine state employment filing. The notice states that on July 27, 2026, a Center Theatre Group employee inadvertently provided a file to the Employment Development Department that went beyond the required new-hire reporting. Center Theatre Group says it engaged with EDD after becoming aware of the upload and received confirmation that the file's contents were deleted from EDD's databases.
What information was involved
The notice states that the data involved included names and Social Security numbers, and specifies that the file did not include bank account information. Center Theatre Group states it has no reason to believe the file was otherwise shared with unauthorized third parties.
What the organization is offering recipients
Center Theatre Group is offering a complimentary 12-month membership in Experian IdentityWorks, including credit monitoring, fraud resolution services, and identity theft insurance. Recipients are instructed to enroll in the monitoring service, with enrollment required by January 31, 2027. The notice also describes general steps such as watching for suspicious communications and reviewing credit reports, and outlines options for fraud alerts and security freezes.
What the notice leaves open
The notice as filed does not state a total number of individuals affected, nor does it give a separate date on which Center Theatre Group became aware of the upload apart from the July 27, 2026 incident date. It also does not specify how many current employees, former employees, or new hires were included in the file, stating only that it contained information about all three groups.
California's breach-notice rule
California's breach law (Civil Code § 1798.82 for businesses, § 1798.29 for state agencies) requires any person or business that must notify more than 500 California residents of a single breach to submit one sample copy of that notice to the Attorney General electronically. The California Attorney General's breach list, where this notice was found, is built from those submissions. Source: California Department of Justice, Office of the Attorney General, Data Security Breach Reporting. The guide Data breach notification laws by state: thirteen states, read directly reads the rule in full, and the glossary defines Breach notification law.
Other hospitality & entertainment incidents on cisonews.net
- Sarku Japan, Breach notice, first disclosed October 27, 2026
- Magna Hospitality Group, Breach notice, first disclosed October 13, 2026
- Live Nation Entertainment, 8-K Item 8.01, first disclosed May 31, 2024
- Caesars Entertainment, 8-K Item 8.01, first disclosed September 14, 2023
- MGM Resorts International, 8-K Item 7.01, first disclosed September 13, 2023
Sources
- 2026-11-03 · ACenter Theatre Group of Los Angeles, notice filed with the California Attorney General, published November 3, 2026
- 2026-11-03 · ACalifornia Attorney General, data breach notification record, published November 3, 2026
- undated · ACalifornia Department of Justice, Office of the Attorney General, Data Security Breach Reporting
Tier A: the organization itself (including notices it filed with a state attorney general), a regulator or SEC EDGAR. Tier B: established press. Each fact on this page carries its supporting passage in the page source.
Entries like this one, in Wednesday’s docket
Wednesdays
Unsubscribe any time.