Department of Rehabilitation

On January 9, 2019, the California Department of Rehabilitation suffered a data breach involving an exposed spreadsheet containing sensitive employee information. The compromised data included employee names and Social Security numbers, affecting approximately 12 individuals. The breach was reported to the California Office of the Attorney General on January 25, 2019. In response, the Department took corrective action by offering credit monitoring services to the impacted employees to mitigate potential risks such as identity theft or financial fraud. The incident highlighted vulnerabilities in the handling of personally identifiable information (PII) within the organization, raising concerns about internal data protection protocols and the safeguarding of employee records against unauthorized access or disclosure.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-144124

TPRM report: https://www.rankiteo.com/company/california-department-of-rehabilitation

"id": "cal1017090725",
"linkid": "california-department-of-rehabilitation",
"type": "Breach",
"date": "1/2019",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': '12 (employees)',
                        'industry': 'Public Administration / Social Services',
                        'location': 'California, USA',
                        'name': 'California Department of Rehabilitation',
                        'type': 'Government Agency'}],
 'customer_advisories': 'Credit monitoring services offered to affected '
                        'employees',
 'data_breach': {'file_types_exposed': ['Spreadsheet'],
                 'number_of_records_exposed': '12',
                 'personally_identifiable_information': ['Names',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High (includes SSNs)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_detected': '2019-01-09',
 'date_publicly_disclosed': '2019-01-25',
 'description': 'The California Office of the Attorney General reported that '
                'the Department of Rehabilitation experienced a data breach '
                'involving a spreadsheet that included employee names and '
                'Social Security numbers. Approximately 12 individuals were '
                'affected, and the Department offered credit monitoring '
                'services to those impacted.',
 'impact': {'data_compromised': ['Employee names', 'Social Security numbers'],
            'identity_theft_risk': 'High (SSNs exposed)'},
 'references': [{'date_accessed': '2019-01-25',
                 'source': 'California Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Reported to the '
                                                       'California Office of '
                                                       'the Attorney General'},
 'response': {'recovery_measures': 'Credit monitoring services offered to '
                                   'affected individuals'},
 'title': 'California Department of Rehabilitation Data Breach (2019)',
 'type': 'Data Breach'}