California Department of Justice Releases Results of Independent Investigation of Firearms Dashboard Data Exposure
![California Attorney General Rob Bonta at a press conference in March of this year. [Image from Attorney General Rob Bonta's Facebook page]](https://kymkemp.com/wp-content/uploads/2022/06/288635612_593013808846943_3034317663941034108_n.jpg)
California Attorney General Rob Bonta at a press conference in March of this year. [Image from Attorney General Rob Bonta’s Facebook page]
[Yesterday,] the California Department of Justice (DOJ)…released the results of an independent investigation of the exposure of confidential personal data associated with the update of DOJ’s 2022 Firearms Dashboard. The investigation was conducted by independent legal and forensic cyber experts. The investigation found that some confidential personal data of roughly 192,000 individuals who applied for a concealed carry weapons (CCW) permit from approximately 2012-2021 was unintentionally disclosed due to the incident, which, as previously reported by DOJ, occurred on June 27 and June 28, 2022.
“This unauthorized release of personal information was unacceptable. This was more than an exposure of data, it was a breach of trust that falls far short of my expectations and the expectations Californians have of our department,” said Attorney General Bonta. “I remain deeply angered that this incident occurred and extend my deepest apologies on behalf of the Department of Justice to those who were affected. I thank the outside experts for this independent report, which is an important step in our work to build trust and transparency. While the report found no ill intent, this incident was unacceptable, and DOJ must be held to the highest standard. This failure requires immediate correction, which is why we are implementing all of the recommendations from this independent report.”
In response to the data exposure, DOJ retained the law firm of Morrison Foerster to lead an independent investigation, with the assistance of FTI, an outside cyber expert. The investigation found that this improper exposure on the Firearms Dashboard, while unacceptable, was unintentional, and due to a number of deficiencies within DOJ including lack of training, expertise, and professional rigor; insufficient documentation, policies, and procedures; and inadequate oversight. The investigation provides the public and DOJ with an overview of the incident, as well as recommendations for the Department to improve its ongoing data security practices.
DOJ has committed to implementing all
recommendations from the independent investigation:
- Conduct a thorough review of all DOJ policies and procedures regarding the handling of confidential personal data and the supervision of personnel handling such data.
- Provide enhanced trainings regarding the handling of confidential personal data as appropriate, taking into account the specific roles and responsibilities of DOJ personnel.
- Evaluate security risks for IT solutions used for projects that involve personal data and provide formal training for DOJ personnel regarding the use of these solutions.
- Centralize and improve DOJ’s organizational structure to enhance oversight and supervision of organization-wide risk management, data security, and related functions. To improve its oversight over risk management, data security, and related functions, DOJ will hire a chief information security officer to lead a team of specialists and have ultimate responsibility for data security across all DOJ components.
- Develop a detailed data incident action plan for use in case of any future reports of exposure of confidential or sensitive data.
- Review and revise its approval process for any project involving confidential personal data to ensure that such review is sufficiently documented, systematic, and rigorous.
A copy of the report can be found here. Additional information and updates may be found at https://oag.ca.gov/
dataexposure.
Earlier: California Firearm Owner Data Leak More Extensive Than Originally Reported
Join the discussion! For rules visit: https://kymkemp.com/commenting-rules
Comments system how-to: https://wpdiscuz.com/community/postid/10599/
Much ado about nothing…
Our next idiot governor.
He is actually deeply angered that his department got caught. How much did this POS have to pay the law firm to determine it was unintentional? Even as a lowly line staff, I receive almost excess training on HIPPA. Anyone working with DOJ doesn’t just wake up one day and land a job. These people are supposedly well versed in privacy law, have extremely clean background checks and have no excuses except extremely reckless behavior right from the top.
Omg, I just saw that the NYC Mayor Eric Adams came out and said he is directing city staff to remove and treat mentally I’ll homeless people from the streets wether they want the treatment or not!
Such good news!
It’s the most progressive policy that I’m aware of and United States for dealing with the homeless.
Watch out for an ever evolving definition of mentally ill.
You know how progressives love to change definitions.
It will be used against women by both the left and the right.
Homeless = Vagrants
I was told long ago that normal is the setting on a washing machine.
Who cares about New York we live in California stop trying to derail the conversation
That’s because the homeless are being attacked by violent criminals.
“Acting to address “a crisis we see all around us” toward the end of a year that has seen a string of high-profile crimes involving homeless people, Mayor Eric Adams announced a major push on Tuesday to remove people with severe, untreated mental illness from the city’s streets and subways.”
“Mr. Adams, who has made clearing homeless encampments a priority since taking office in January, said the effort would require involuntarily hospitalizing people who were a danger to themselves, even if they posed no risk of harm to others, arguing the city had a “moral obligation” to help them.”
You failed to mention that, for some reason.
It seems to me as though it’s the attackers that should be taken into custody against their will and incarcerated, not the homeless victims.
NYC Mayor Eric Adams is punishing the victims, instead of arresting the attackers…
That’s some backwards ass shit.
That’s worse than arresting and incarcerating store owners, for being robbed.
It makes about as much sense.
Until the current definition for involuntary commitment is changed to recognize that being unable to provide basic needs IS a symptom of a mental illness that makes them an immediate danger to themselves or others, there is no ability to remove mentally ill people from the streets even if it is inevitable some will not survive the rigors of it and others will be violent.
Painting what is in essence a biological absence of impulse control as a right means that no one can be held responsible for their actions. Insisting on containing only crime after it happens, calling one a victim and one a victimizer, is to have to wait until there is the inevitable violence then have the police clean it up. There will be no effective treatment. And, since mental illness is also a way of not legally being responsible for a crime, the mentally ill, even if perpetuating violence, are soon released to replay the same actions. The violence just keeps escalating. That result means that a very small percent of the population can destroy any security for the rest of the population.
Misfortune as a reason for homelessness is such a small percentage of the population as to be invisible. The mentally ill or drug addicted think that way because they are mentally ill or drug addicted. Drug addiction and/or mental illness is the common cause for homelessness. Why not treat it as a symptom rather than a right? Thinking of homelessness as a problem of society being ill rather than of the individual being ill excuses everyone from actually doing what needs doing. People then have a right to be mentally ill or drug addicted no matter what the fall out and nothing can be done because reasoning mental illness away is not reality but is the only thing that can be done.
How did the investigators determine it was unintentional? I call bullshit.
Well California probably called China and was like “hey did you guys send that check yet? We sent the information you requested about 3 weeks ago. Normally it’s five business days for us to get cashed out.” and China was like “nah bro, we haven’t got the information yet. Who did you send the passwords to?” and then when California gave them the wrong email address, China probably laughed at us and hung up the phone.
If making data bases easily available for use takes precedence over security, accidental release is inevitable. Think of the number of times such that such things have been reported by FEMA, ICE, OPM, CSB, various branches of the military, etc. This one unfortunately hit an extremely suspicious subset of people. They need no proof to assume it was deliberate and malicious. And no proof will be enough to convince them otherwise.
If an institution sets up conditions that make the release of data inevitable, can the release be considered accidental? ?
I am with you. I also call it BS! Frankly I don’t believe a thing Attorney General Bonta says!
Politicians generally but liberal and democrat ones especially, never trust them. Simply laugh in their faces. They will become enraged and slip up, one way or another, leading to their downfall. Do you really believe our Marin County based Congressperson cares about you living on a hillside in the backwaters of Humboldt county? Yea, sure, the moon is made of smoked goat cheese from Spain too! He would rather you leave and not be like a never ending rash on his inner thigh. Hence, he gives no consideration to how rural landowners, farmers, and foresters will be able to deal with EVs and suggests that perhaps you should move to a city, but not his. Move to Marin City by San Quentin with all the other poor black people across the tracks he would say. They justify their illegal activities in their feeble Marxist addled brains because they operate from the perspective that their noble actions are a means to an end for their selfish goals. Constituents be dammed. It isn’t for the common good, they are doing it because they hate you, you are an impediment, and they think you are pond scum. Keep moving forward, ignore them, and don’t allow these scum people to steal your life for their own personal erection.
No red wave but, I can hear a red drip.
I read in the NRA magazine that nearly all conservative Republicans, especially in the South, carry weapons even if they are not permitted. The likes of Ted Cruz think just because they are elected they don’t have to follow the regulations. Ronny Reagan is rumored to carry a side arm when he was riding his horse. And he was in dementia making it predictable the Moscow McConnell would do the same. And most likely nearly all Republicans belong to the NRA.
You opinion is irrational. I read my NRA magazine every month and haven’t seen what you posted…
Spot on.
All your personal information got disseminated … if you applied for a CCW between those years?
Totally unacceptable ans should have repercussions but..
“Soooorrrry”
“The investigation found that this improper exposure on the Firearms Dashboard, while unacceptable, was unintentional”
BULLSHIT
“…..while unacceptable, was unintentional, and due to a number of deficiencies within DOJ including lack of training, expertise, and professional rigor; insufficient documentation, policies, and procedures; and inadequate oversight.” So this is the language they chose to basically sweep it all under the rug while it, like everything else in the short attention span of the public, quickly fades away. With no repercussions to those who committed this evil and egregious act. Thank you to our wonderful Department of Injustice (which is about as non-political as the FBI). To hell with the “gun people” our betters have decided.
OBiden gave the California DOJ $$$ Millions to harass California gun owners…
The people involuntarily outed should be paid reparations like other victims.
50k should be adequate for them to move to an undisclosed location.
Maybe even to a state that has gun rights.
Oops, sorry is unacceptable.
—————————————-
Were there any DOJ agents on the outed list?
Nah, the information should be accessible through public records request anyway.
For what purpose?
Info breaches for the Dark Web?
So, who lost their job? If it was unintentional then it was incompetent. If not it was criminal, yet no one is held responsible. So much for the days of the buck stops here.