The California Department of Justice experienced a data breach on June 27, 2022, involving the unauthorized disclosure of sensitive personal information. The incident primarily affected approximately 100 individuals holding concealed carry weapons (CCW) permits. The exposed data included names, dates of birth, residential addresses, and CCW license numbers—information that, if misused, could pose significant privacy and security risks to the affected individuals. The breach raises concerns about potential identity theft, targeted harassment, or physical safety threats for permit holders, given the sensitive nature of the leaked data. While the exact cause of the breach (e.g., insider threat, system vulnerability, or external cyberattack) was not specified in the report, the exposure of such regulated information underscores critical lapses in data protection protocols within a government law enforcement agency. The incident highlights the broader implications of mishandling firearm-related records, which are subject to strict confidentiality laws in many jurisdictions. The breach not only erodes public trust in the agency’s ability to safeguard sensitive data but also may lead to legal repercussions, reputational damage, and heightened scrutiny over its cybersecurity practices.

The California Department of Justice reported on May 11, 2012, that hackers affiliated with Anonymous accessed private email accounts of a retired agent from the Computer and Technology Crime High-Tech Response Team (CATCH) in November 2011. The breach potentially exposed personal information, including names and financial account information, although the exact number of individuals affected and specific details regarding the breach are unknown.