The State Water Resources Control Board disclosed an unauthorized disclosure of water right holder information, including login identifiers and personal contact details, which occurred on September 16, 2022, and was discovered on May 25, 2023. The data was inadvertently shared with attorneys in litigation. The Board restricted website access and reset credentials. No evidence of misuse was found.