The Friesen Group, a Redding, California business support company, reported that it received a suspicious email on May 19, 2025, indicating that information on its network might be at risk. An investigation determined on July 15, 2025, that an unauthorized user had accessed the network for a limited period and may have accessed data. Friesen Group submitted a sample notice to the California Attorney General dated September 21, 2026.
The notice does not provide an overall affected-person count. It states that potentially impacted information may include names and other data, while the accompanying breach report identifies Social Security numbers, driver's license or state identification numbers, health insurance information, medical records, and financial information as potentially affected categories. The specific data elements for each person were not confirmed in the filed notice. The notice identifies residents in California, Kentucky, Maryland, New Mexico, New York, North Carolina, Oregon, and Rhode Island, but the total number notified in each state is not publicly stated.