{"id":1660,"date":"2022-08-22T10:59:34","date_gmt":"2022-08-22T17:59:34","guid":{"rendered":"https:\/\/www.cdcr.ca.gov\/family-resources\/?p=1660"},"modified":"2023-06-16T16:50:29","modified_gmt":"2023-06-16T23:50:29","slug":"letter-non-hipaa","status":"publish","type":"post","link":"https:\/\/www.cdcr.ca.gov\/family-resources\/2022\/08\/22\/letter-non-hipaa\/","title":{"rendered":"Letter \u2013 Non‑HIPAA"},"content":{"rendered":"\n

NOTICE OF DATA BREACH<\/h2>\n\n\n\n

Reference Number 22-01<\/h3>\n\n\n\n

CDCR had a recent problem with a computer system.  It may have involved access to information about inmates, parolees, and those discharged from CDCR custody since 2008.   We do not know if anyone looked at or copied any information, but we want you to know that this happened.<\/p>\n\n\n\n

What Happened<\/h4>\n\n\n\n

This was a computer system that allows the California Department of Corrections and Rehabilitation (CDCR) to share data with certain people outside CDCR.  Each set of information is protected with a specific password.  Those allowed to get your information must have that password.   <\/p>\n\n\n\n

In January 2022 during routine maintenance, CDCR discovered some suspicious activity on that system dating back to December 2021.  CDCR immediately shut down that system.  CDCR then began a multi-agency investigation into whether an unauthorized user had looked at or copied any of the information on the system before it was shut off.  In late June, 2022, that investigation revealed someone without permission did get into the system.  Fortunately, there was no sign that anyone copied your information.   <\/p>\n\n\n\n

Even though it appears no one copied your information, it is possible that someone may have looked at your information while in the system.  Because of this CDCR must let you know this happened.  We are doing this so you can do what you need to do to protect your information.<\/p>\n\n\n\n

What Information Was Involved<\/h4>\n\n\n\n

The information, which dated back to 2008, included inmate names, CDCR numbers, dates of birth, social security numbers, driver\u2019s license numbers\/California ID card numbers, and inmate trust account information.  Because this information could be used by an identity thief, CDCR is providing this information.  <\/p>\n\n\n\n

What We Are Doing<\/h4>\n\n\n\n

We take this matter very seriously and regret that this happened. We want to assure you that we have changed our procedures and practices to limit the risk this will happen again.  That computer system is no longer being used.  CDCR is using a new system with more security controls.<\/p>\n\n\n\n

What You Can Do<\/h4>\n\n\n\n

Because personal information was on the computer system, we recommend that anyone whose information was on this system place a fraud alert on their credit files and order copies of their credit reports by following the recommended privacy protection steps outlined in the \u201cBreach Help \u2013Consumer Tips from the California Attorney General,\u201d which is also posted with this notice.  Those whose information was on the system  should also check their credit reports for any accounts they do not recognize. If they find anything suspicious, follow the instructions found in step four of \u201cBreach Help \u2013Consumer Tips from the California Attorney General.\u201d<\/p>\n\n\n\n

The three major credit reporting bureaus and contact information is below:<\/p>\n\n\n\n