CR&R Incorporated data breach

Clerk's notes

CR&R Incorporated, a waste management and recycling services provider primarily operating in California, officially reported a data security incident to the California Attorney General on January 23, 2025. The company stated that the breach stemmed from unauthorized access to its systems, which occurred on or about October 19, 2022.

As a utility-style service provider, CR&R Incorporated typically collects and maintains personal information necessary for account management and service delivery. The unauthorized access involved systems where this data was stored, meaning sensitive information may have been compromised.

If you received a data breach notification letter from CR&R Incorporated, it signifies that your personal information was involved in this incident. Such notices are issued to inform affected individuals about the nature of the event and to provide guidance on protective measures.

In response to this type of incident, it is crucial to remain vigilant. We advise closely monitoring your financial statements and credit reports for any unusual or unauthorized activity. Additionally, be cautious of unsolicited communications, such as emails or phone calls, that may attempt to acquire further personal details, as these could be phishing attempts.

This incident is currently under investigation. Individuals who received a breach notification from CR&R Incorporated may want to learn more about their legal options. You can request a free case review to discuss how this event might affect you.

If a notification letter about this breach reached you, see every California data breach on file or browse all cases.