AccidentalMisdeliveryCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumResolved
United Services Automobile Association
bd_acfdf7cce72c481b · schema v1 · pii pii-v1
Full breach record for United Services Automobile Association →USAA disclosed a data breach affecting California members due to a system error during a routine update to its document delivery system between April 13 and April 30, 2024. The error resulted in the inadvertent posting of some members' documents, including PII, PHI, and financial data, to other members' online accounts. USAA removed the documents, investigated the incident, and enhanced IT change management processes. Affected individuals were offered two years of Experian IdentityWorks.
California clockDiscovered Apr 30, 2024 → Notified Aug 27, 2024119d ✗ CA 60-day late17 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-591026
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 29, 2024
- Raw hash
- ce3a650d379f3fe1f19742414a19efc402bd6977847fead28d5e2ba3a5346b87
Reporting entity
- Name
- United Services Automobile Associationnorm: united services automobile
Victim entity
- Name
- United Services Automobile Associationnorm: united services automobile
Incident
- Discovered
- Apr 30, 2024
- Materiality determined
- —
- Notification sent
- Aug 27, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unknown
Compliance
- Time to disclose
- 17 weeks(121 days from discovery to filing)
- Compliance flags
- CA 60-day late · 119d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 30, 2024→ Notified: Aug 27, 2024119d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.