AccidentalGovernmentGovernmentMisdeliveryCustomer Data InvolvedEmployee Data InvolvedGovernment IDIdentity (basic)MediumResolved

State of California, Department of Industrial Relations

bd_3852fed36685bc1e · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 19, 2025

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for State of California, Department of Industrial Relations →

The California Department of Industrial Relations notified individuals that from August 26 to September 2, 2025, the Department of General Services Office of State Publishing misprinted and mailed workers' compensation documents containing Social Security numbers due to a computer malfunction. The SSNs appeared as nine-digit numbers in the Date of Injury field. Corrected documents were mailed by September 5, 2025. Affected parties were notified of the inadvertent disclosure.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 26, 2025

Begins

Sep 19, 2025

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: State of California, Department of Industrial Relations
norm: state of california department of industrial relations

Name: State of California, Department of Industrial Relations
norm: state of california department of industrial relations
Industry: Governmentllm

Discovered: —
Breach occurred: Aug 26, 2025 – Sep 2, 2025
Materiality determined: —
Notification sent: Sep 19, 2025
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Unknown
Third party: via Department of General Services (DGS) Office of State Publishing (OSP)

During the incident: Worked with OSP so that corrected datamailers were printed and mailed by the close of business on Friday, September 5, 2025
Notified the other parties to your case(s) who received misprinted datamailers containing a Social Security number that they received inadvertently disclosed information that they are not authorized to use, and are prohibited from further disclosing
Changes made: Taking steps to reduce the chances of something similar happening in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-610325
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 19, 2025
Raw hash: 63a1b763404659c5679ab2de9c28ea1167b3912535ef675d9c63d840d313f729

Reporting entityState of California, Department of Industrial Relations

Victim entityState of California, Department of Industrial Relations

IncidentUnknown

Stated responseWorked with OSP so that corrected datamailers were printed and mailed by the close of business on Friday, September 5, 2025

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov