State Water Resources Control Board

The State Water Resources Control Board experienced a data breach reported on June 8, 2023, stemming from an unauthorized disclosure that occurred on September 16, 2022. The incident exposed personal information of water right holders, including full names, addresses, phone numbers, and email addresses. While the data was compromised, there is no evidence of unauthorized access or malicious use of the exposed information. The breach did not involve financial records, sensitive government data, or critical infrastructure disruption. The affected individuals were primarily customers (water right holders), and the organization took steps to notify impacted parties while reinforcing cybersecurity measures to prevent future incidents. The breach did not escalate to ransomware, systemic outages, or broader economic or national security threats.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-567743

TPRM report: https://www.rankiteo.com/company/state-water-resources-control-board

"id": "sta025091825",
"linkid": "state-water-resources-control-board",
"type": "Breach",
"date": "9/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Water right holders (number '
                                              'unspecified)',
                        'industry': 'Environmental Regulation / Water '
                                    'Resources',
                        'location': 'California, USA',
                        'name': 'State Water Resources Control Board',
                        'type': 'Government Agency'}],
 'data_breach': {'data_exfiltration': 'Unclear (disclosure occurred, but no '
                                      'evidence of unauthorized access/use)',
                 'personally_identifiable_information': ['full name',
                                                         'address',
                                                         'phone number',
                                                         'email address'],
                 'sensitivity_of_data': 'Moderate (PII)',
                 'type_of_data_compromised': ['personal information']},
 'date_detected': '2023-06-08',
 'date_publicly_disclosed': '2023-06-08',
 'description': 'The State Water Resources Control Board reported a data '
                'breach on June 8, 2023, involving an unauthorized disclosure '
                'of information occurring on September 16, 2022. The breach '
                'potentially impacted the personal information of water right '
                'holders, including their full name, address, phone number, '
                'and email address, but there is no indication of unauthorized '
                'access or use of this information.',
 'impact': {'data_compromised': ['full name',
                                 'address',
                                 'phone number',
                                 'email address'],
            'identity_theft_risk': 'Potential (no indication of unauthorized '
                                   'use)'},
 'investigation_status': 'Ongoing (no unauthorized use detected as of '
                         'disclosure)',
 'title': 'State Water Resources Control Board Data Breach',
 'type': 'Data Breach'}