MisuseGovernmentGovernmentData MishandlingEmployee Data InvolvedIdentity (basic)Government IDEmploymentMediumResolved

California Department of Social Services

bd_9c7348ba71f8ae9d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 6, 2023

Filed

Feb 16, 2023

To disclose

6 weeks

Affected

Not disclosed

Confidence

66%

Full breach record for California Department of Social Services →5 incidents on file

On January 6, 2023, the California Department of Social Services (CDSS) discovered that an employee emailed a document containing names, Social Security numbers, and bargaining unit numbers to their personal email account. The incident was flagged by security monitoring software. CDSS contacted the employee and required immediate deletion of the email. The Department is evaluating procedures and implementing new security controls to prevent recurrence. Affected individuals were advised to place fraud alerts on their credit files.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 41 days

Jan 6, 2023

Begins

Jan 6, 2023

Discovered

Feb 16, 2023

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: California Department of Social Services
norm: california department of social

Name: California Department of Social Services
norm: california department of social
Industry: Governmentllm

Discovered: Jan 6, 2023
Breach occurred: Jan 6, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security number
Attack vector: Insider
Threat actor: Internal
Regulator citations: Reported the incident and these remediation efforts to the California Information Security Office and other agencies as required by state law
Initial access: insider_action

During the incident: Contacted the CDSS employee
Required the employee to immediately delete the email from their personal email
Changes made: Procedures and practices are being evaluated and revised to minimize the risk of recurrence
Implementing additional, new security controls
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(41 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-563292
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 16, 2023
Raw hash: 02f55af9cb4ff4a9be76d1f90fb779f3ecff4431162b50435803af8e5e3a4106

Reporting entityCalifornia Department of Social Services

Victim entityCalifornia Department of Social Services

Incidentdiscovered Jan 6, 2023

Stated responseContacted the CDSS employee

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov