The "security breach law" also requires the business to notify the Office of the Attorney General. Links to notices sent to the OAG from 2019 to the present are listed on this webpage. We are working to keep this list as up-to-date as possible. Questions about specific notices may be directed to IDTheft@oag.state.md.us ..