Adam Shostack provides some useful information on companies who have publicly disclosed data breaches and how to find more later on. Gotta love the Internet.
Emergent Chaos: Breaches in SEC Reports
this Google search against the edgar-online site works well:
(“disclosure of personal information”|“security breach”) (“10-K”|“10K”|“10-Q”|“10Q”) site:edgar-online.com