Workers’ Compensation Insurance Rating Bureau of California (WCIRB) Data Breach – Investigated by Federman & Sherwood
Oklahoma City, Oklahoma (December 12, 2025) – Federman & Sherwood, a national law firm focused on data breach and consumer protection litigation, is investigating a cybersecurity incident involving the Workers’ Compensation Insurance Rating Bureau of California (WCIRB) following the organization’s recent filing with the Attorney General of Maine.
According to the notification letter mailed to impacted individuals, WCIRB detected a network security incident on or around July 9, 2025, involving unauthorized access to a third-party hosted Box.com environment. WCIRB immediately engaged third-party forensic specialists to secure the environment and investigate the extent of the unauthorized access.
The investigation determined that an unauthorized party acquired files containing personal information from the Box.com system. Data analysis concluded on September 18, 2025, with follow-up address verification completed on October 7, 2025. WCIRB confirms that personal data—including individuals’ names and additional sensitive identifiers listed in individualized notices—may have been involved.
Federman & Sherwood is investigating whether WCIRB had appropriate cybersecurity measures in place, whether the incident could have been prevented, and what legal remedies may be available to impacted individuals and others whose information was compromised.
The compromised information may have included:
- Full name
- Social Security number
- Other sensitive information
What is Workers’ Compensation Insurance Rating Bureau of California (WCIRB)?
The Workers’ Compensation Insurance Rating Bureau of California (WCIRB) is California’s designated statistical agent for workers’ comp, collecting data, developing rates, and overseeing classification.
Individuals who received a notification from WCIRB—or who believe their data may have been impacted—are encouraged to contact Federman & Sherwood at 1-800-237-1277 or email info@federmanlaw.com for more information.