AccidentalProfessional ServicesProfessional ServicesMisdeliveryEmployee Data InvolvedIdentity (basic)Government IDMediumResolved

Sacramento Area Firefighters, Local 522

bd_feba44bfd7a305c3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 23, 2012

Filed

Mar 28, 2012

To disclose

5 days

Affected

Not disclosed

Confidence

65%

Full breach record for Sacramento Area Firefighters, Local 522 →

Sacramento Area Fire Fighters, Local 522 disclosed that an employee accidentally sent a spreadsheet containing names, contact information, and Social Security Numbers of active and retired members to the Sacramento Central Labor Council between March 5-6, 2012. The CLC forwarded the data to a mailing house. The breach was discovered on March 23, 2012, when members noticed SSNs on mailing labels. The union contacted the third parties to demand destruction of the documents.

J jump to incidentP pin to compareR raw source

California clockDiscovered Mar 23, 2012 → Notified Mar 26, 20123d ✓ CA 60-day OK5 days discovery → filing

Incident timeline

undetected · 18 days

discovery → filing · 5 days

Mar 5, 2012

Begins

Mar 23, 2012

Discovered

Mar 28, 2012

Filed

vs. sector median

17 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Sacramento Area Firefighters, Local 522
norm: sacramento area firefighters local 522
Domain: sacareafirefighters.org

Name: Sacramento Area Firefighters, Local 522
norm: sacramento area firefighters local 522
Domain: sacareafirefighters.org
Industry: Professional Servicesllm

Discovered: Mar 23, 2012
Breach occurred: Mar 5, 2012 – Mar 6, 2012
Undetected for: 18 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 26, 2012
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown
Threat actor: Internal
Third party: via Sacramento Central Labor Council

During the incident: Contacted the CLC and Capitol Mailing, Inc. to advise them of the issue
Demanded they destroy all documents containing Local 522 members' personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 days(5 days from discovery to filing)
Compliance flags: CA 60-day OK · 3d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Mar 23, 2012
→ Notified: Mar 26, 2012
3d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Mar 23, 2012 → Notified: Mar 26, 2012	3d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-22848
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 28, 2012
Raw hash: 8960b3e252a4cd72f7ceed1037f2bf052794ecd937b732c8a2eb16e23deda7d9

Reporting entitySacramento Area Firefighters, Local 522

Victim entitySacramento Area Firefighters, Local 522

Incidentdiscovered Mar 23, 2012

Stated responseContacted the CLC and Capitol Mailing, Inc. to advise them of the issue

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov