AccidentalGovernmentGovernmentDisposal ErrorCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMinorMediumResolved

California Department of Social Services

bd_29aceae2725603b7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 17, 2014

Filed

Aug 29, 2014

To disclose

6 weeks

Affected

Not disclosed

Confidence

66%

Full breach record for California Department of Social Services →5 incidents on file

The California Department of Social Services (CDSS) disclosed an accidental disposal error where confidential documents containing personal information (names, addresses, dates of birth, and Social Security numbers) were discarded prior to shredding. The incident involved records associated with children's residential and senior care facilities. CDSS investigated the incident, determined it was accidental, and is reviewing procedures to prevent recurrence.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 6 weeks / 43 days

Jul 16, 2014

Begins

Jul 17, 2014

Discovered

Aug 29, 2014

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: California Department of Social Services
norm: california department of social

Name: California Department of Social Services
norm: california department of social
Industry: Governmentllm

Discovered: Jul 17, 2014
Breach occurred: Jul 16, 2014
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDMinor
Data elements: Social Security numberDate of birth
Attack vector: Unknown

During the incident: Immediately investigated the incident
Contacted the CDSS Information Security Office
Changes made: Reviewing and revising procedures and practices
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(43 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-46433
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 29, 2014
Raw hash: 699d1d039ed5c9e5f61b5177365051b381bfb76b05efa02fc58cae999cc03eaf

Reporting entityCalifornia Department of Social Services

Victim entityCalifornia Department of Social Services

Incidentdiscovered Jul 17, 2014

Stated responseImmediately investigated the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov