AccidentalGovernmentGovernmentMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

Department of Motor Vehicles

bd_ebae42235715eb6e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 9, 2015

Filed

Nov 6, 2015

To disclose

28 days

Affected

Not disclosed

Confidence

64%

Full breach record for Department of Motor Vehicles →

The California Department of Motor Vehicles (DMV) disclosed that on September 28, 2015, an employee erroneously sent a file containing personal information (name, driver license number, and in some cases date of birth and physical description) to the Riverside Probation Department instead of the intended recipient, the Santa Clara Transportation Agency. The error was discovered on October 9, 2015, when the Riverside Probation Department reported the incident. The DMV retrained the employee and reviewed procedures. Social Security Numbers were not released.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 11 days

discovery → filing · 28 days

Sep 28, 2015

Begins

Oct 9, 2015

Discovered

Nov 6, 2015

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: California Department of Motor Vehicle (CA DMV)
norm: california department of motor vehicle ca dmv

Name: Department of Motor Vehicles
norm: department of motor vehicles
Domain: dmvusa.com
Industry: Governmentllm

Discovered: Oct 9, 2015
Breach occurred: Sep 28, 2015
Undetected for: 11 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Date of birth
Attack vector: Unknown
Threat actor: Internal

During the incident: Retrained the employee involved on proper policy and procedures
Provided employee awareness training
Reviewed policies and procedures
Changes made: Retrained the employee involved on proper policy and procedures
Provided employee awareness training
Reviewed policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-58698
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 6, 2015
Raw hash: a8027000495d2de0b67a3b3f838b03c6c9bd241b4ae82cfc45679ae4075eb75f

Reporting entityCalifornia Department of Motor Vehicle (CA DMV)

Victim entityDepartment of Motor Vehicles

Incidentdiscovered Oct 9, 2015

Stated responseRetrained the employee involved on proper policy and procedures

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov