AccidentalMisconfigurationCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
State of California Department of Justice
bd_7dc17e848ace5c51 · schema v1 · pii pii-v1
Full breach record for State of California Department of Justice →The California Department of Justice disclosed personal information on June 27, 2022, due to a misconfiguration during an update to its Firearms Dashboard Portal. The exposed data included names, dates of birth, addresses, and government-issued identifiers for individuals involved in concealed carry weapon permit processes between 2011 and 2021. The data was publicly accessible for less than 24 hours before being removed. The DOJ shut down the dashboard, launched an investigation, and offered credit monitoring to affected individuals.
California clockDiscovered Jun 27, 2022 → Notified Jul 8, 202211d ✓ CA 60-day OK5 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-555783
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 30, 2022
- Raw hash
- 4d80c6b5cb1a06e974905c4633ef67b4fba729996d635e97eb4b9dd0c7c49b2d
Reporting entity
- Name
Victim entity
- Name
- State of California Department of Justicenorm: state of california department of justice
- Domain
- oag.ca.gov
Incident
- Discovered
- Jun 27, 2022
- Materiality determined
- —
- Notification sent
- Jul 8, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Misconfiguration
Compliance
- Time to disclose
- 5 weeks(33 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 11d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 27, 2022→ Notified: Jul 8, 202211d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.