DisclosureLens
AccidentalGovernmentEducationGovernmentMisdeliveryEmployee Data InvolvedGovernment IDIdentity (basic)BiometricEmploymentMediumResolved

The Commonwealth of Massachusetts Department of Early Education and Care

bd_678522a2c213b3df · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 8, 2026

Filed

Jan 22, 2026

To disclose

14 days

Affected

1state residents only

Confidence

66%
Full breach record for The Commonwealth of Massachusetts Department of Early Education and Care →3 incidents on file

The Massachusetts Department of Early Education and Care (EEC) disclosed that on January 8, 2026, it accidentally sent Criminal Offender Record Information (CORI) and SAFIS Fingerprinting Results to an unauthorized individual who had access to a shared email address. The affected individual was Chantelle Cabrera. EEC contacted the recipient and advised them to delete the information. The incident involved the misdelivery of sensitive government and biometric data.

Massachusetts clock✓ MA AG ≤30d14 days discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 14 days

Jan 8, 2026

Begins

Jan 8, 2026

Discovered

Jan 22, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.