AccidentalOtherMisdeliveryEmployee Data InvolvedIdentity (basic)Government IDMediumContained

The Roman Catholic Bishop of San Diego

bd_53320d1bef76e6c2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 8, 2025

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

75%

Full breach record for The Roman Catholic Bishop of San Diego →

On or about February 20, 2025, the Roman Catholic Bishop of San Diego (RCBSD) experienced an accidental data disclosure when an HR Department employee inadvertently sent an internal spreadsheet containing personal information to an incorrect email address. Affected data includes names, addresses, social security numbers (for some recipients), and government-issued ID numbers such as license and passport numbers. Notification letters were sent May 9, 2025. IDX identity protection services were offered.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 20, 2025

Begins

May 8, 2025

Filed

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_f2198cb4244431322025-05-09 · +1dVerified

Name: The Roman Catholic Bishop of San Diego
norm: the roman catholic bishop of san diego

Name: The Roman Catholic Bishop of San Diego
norm: the roman catholic bishop of san diego
Industry: Otherllm

Discovered: —
Breach occurred: Feb 20, 2025
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unknown
Threat actor: Internal
Regulator citations: Filed with California Office of the Attorney General

During the incident: Immediately took action to contact the recipient in an attempt to retrieve the spreadsheet and/or confirm that it had been deleted
Offering identity theft protection services through IDX, including 12 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed id theft recovery services
Changes made: Reiterated with all staff the importance of entering email addresses correctly and double checking the addresses before any sensitive information is sent
Reiterated and discussed with all staff the importance of not emailing documents with personal information unless absolutely necessary and only after the appropriate safeguards have been taken
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGMay 8 · first · this page

Indiana State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-602444
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 8, 2025
Raw hash: de33ca443ffc45c148ec90b12c5487aebaa2df56820bb929b16238d0c1909e2e

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityThe Roman Catholic Bishop of San Diego

Victim entityThe Roman Catholic Bishop of San Diego

IncidentUnknown

Stated responseImmediately took action to contact the recipient in an attempt to retrieve the spreadsheet and/or confirm that it had been deleted

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov