AccidentalMisdeliveryCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICCREDENTIALSLowContained
State Water Resources Control Board
bd_02128f16f155bd0b · schema v1 · pii pii-v1
Full breach record for State Water Resources Control Board →The State Water Resources Control Board disclosed an unauthorized disclosure of water right holder information, including login identifiers and personal contact details, which occurred on September 16, 2022, and was discovered on May 25, 2023. The data was inadvertently shared with attorneys in litigation. The Board restricted website access and reset credentials. No evidence of misuse was found.
California clockDiscovered May 25, 2023 → Notified Jun 8, 202314d ✓ CA 60-day OK14 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-567743
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 8, 2023
- Raw hash
- 775018b3798471802293018a89081ade327b8ea7bb741072deed4eb9eaeb7238
Reporting entity
- Name
- State Water Resources Control Boardnorm: state water resources control board
Victim entity
- Name
- State Water Resources Control Boardnorm: state water resources control board
Incident
- Discovered
- May 25, 2023
- Materiality determined
- —
- Notification sent
- Jun 8, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Unknown
Compliance
- Time to disclose
- 14 days(14 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 14d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 25, 2023→ Notified: Jun 8, 202314d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.