AccidentalGovernmentGovernmentMisdeliveryEmployee Data InvolvedIdentity (basic)Government IDMediumResolved

Department of Resources Recycling and Recovery

bd_fe513b9e64a72995 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 23, 2014

Filed

Feb 20, 2014

To disclose

28 days

Affected

Not disclosed

Confidence

65%

Full breach record for Department of Resources Recycling and Recovery →

CalRecycle notified employees that a Leave Activity and Balances Report containing first initial, middle initial, last name, and Social Security Number was erroneously emailed to Personnel Liaisons on January 23, 2014. The agency instructed recipients to delete the email and shred reports. Procedures were reviewed and revised to prevent recurrence.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jan 23, 2014 → Notified Feb 1, 20149d ✓ CA 60-day OK28 days discovery → filing

Incident timeline

Jan 24, 2014

Begins

Feb 20, 2014

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Department of Resources Recycling and Recovery
norm: department of resources recycling and recovery

Name: Department of Resources Recycling and Recovery
norm: department of resources recycling and recovery
Industry: Governmentllm

Discovered: Jan 23, 2014
Breach occurred: Jan 24, 2014
Materiality determined: —
Notification sent: Feb 1, 2014
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unknown

During the incident: Immediately contacted all Personnel Liaisons and instructed them to delete the e-mail and shred the LAB reports
Changes made: Reviewed and revised our procedures to minimize the risk of recurrence
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: CA 60-day OK · 9d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jan 23, 2014
→ Notified: Feb 1, 2014
9d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jan 23, 2014 → Notified: Feb 1, 2014	9d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-44175
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 20, 2014
Raw hash: eab2b4e1740d213e3a0dd52f1c1e10ba3a7b2993aea1ce94892f75b3a5d32196

Reporting entityDepartment of Resources Recycling and Recovery

Victim entityDepartment of Resources Recycling and Recovery

Incidentdiscovered Jan 23, 2014

Stated responseImmediately contacted all Personnel Liaisons and instructed them to delete the e-mail and shred the LAB reports

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov