The CR&R Incorporated Data Breach: Incident Facts and Free Case Review
CR&R Incorporated is a prominent waste management and recycling services provider operating primarily in California. As a utility-style service provider, the company typically collects and maintains sensitive consumer information including names, residential service addresses, billing records, and payment account details necessary for account management and service delivery. In 2025, the company officially reported a data security incident to the California Attorney General regarding unauthorized access to their systems. If you received a data breach notification letter, it indicates that your personal information may have been involved in this incident. This notice is intended to inform you of the nature of the event and provide guidance on the steps you can take to protect your identity and financial security.
- State
- California
- Breach date
- October 19, 2022
- Reported
- January 23, 2025
What to do if you were affected
These general steps can help limit the risk of identity theft and fraud after any data breach.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Related data breach cases
- ZZ Diag Probe
- NSE Insurance Agencies
- HILT-Trust 2020-A and its underlying trusts and affiliates ("HILT")
- Fairwinds Credit Union
- Modoc Medical Center
- Ethan Conrad Properties
- Friesen Group
- Ridgeway Pharmacy Ltd
- Fun For Less Tours, Inc.
- United Underwriters
- The Office of the Los Angeles City
- Seyfarth Shaw LLP
- Opportune LLP
- Partnership HealthPlan of California