AccidentalGovernmentEnergy & UtilitiesGovernmentPublishing ErrorEmployee Data InvolvedGovernment IDIdentity (basic)EmploymentMediumResolved

San Dieguito Water District

bd_c4cc0353b57e0308 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 3, 2014

Filed

Jul 15, 2014

To disclose

12 days

Affected

16state residents only

Confidence

66%

Full breach record for San Dieguito Water District →

The City of Encinitas and San Dieguito Water District inadvertently made a Cal-PERS payment document containing social security numbers and names of employees and former employees accessible on their website from May 13, 2014, to July 3, 2014. The exposure was limited to 16 individuals who accessed the document. The document was removed immediately upon discovery. Affected individuals were offered one year of complimentary credit monitoring.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jul 3, 2014 → Notified Jul 11, 20148d ✓ CA 60-day OK12 days discovery → filing

Incident timeline

undetected · 51 days

discovery → filing · 12 days

May 13, 2014

Begins

Jul 3, 2014

Discovered

Jul 15, 2014

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed16 affectedView incident

Name: San Dieguito Water District
norm: san dieguito water district
Domain: cityofencinitasca.municipalonlinepayments.com

Name: San Dieguito Water District
norm: san dieguito water district
Domain: cityofencinitasca.municipalonlinepayments.com
Industry: GovernmentllmEnergy & Utilitiesllm

Discovered: Jul 3, 2014
Breach occurred: May 13, 2014 – Jul 3, 2014
Undetected for: 51 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 11, 2014
Affected individuals: 16state-resident count only
Data types: Government IDIdentity (basic)Employment
Attack vector: Unknown

During the incident: Immediately after becoming aware, the document was removed and is no longer accessible
Taken necessary steps to improve our processes and systems to prevent this from happening again
Changes made: Providing a free one-year membership in ProtectMyID Alert from ConsumerInfo.com, Inc. an Experian company
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 days(12 days from discovery to filing)
Compliance flags: CA 60-day OK · 8d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jul 3, 2014
→ Notified: Jul 11, 2014
8d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jul 3, 2014 → Notified: Jul 11, 2014	8d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-45886
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 15, 2014
Raw hash: c0abe4ac5a6a0b5fb643c37aae7ba9e13dfe0c0ac8d6fcc92351a0a37802e8b5

Reporting entitySan Dieguito Water District

Victim entitySan Dieguito Water District

Incidentdiscovered Jul 3, 2014

Stated responseImmediately after becoming aware, the document was removed and is no longer accessible

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov