CA DOJ Leak of CCW and Firearm Purchaser PII

[michigander]

The helpful CGer also confirmed I was in the leak. My address has not changed in 4 years and was part of the leak. Maddening.

[ritter]

No letter here, either.

[flyte74]

Ever since this leak happened I have been getting A LOT more spam texts to my phone. I haven't tried to confirm that my information was in fact leaked, but the substantial increase in spam texts coincides with the timing of the leak. No letter but that doesn't seem to be a good indicator either way.

[CessnaDriver]

Originally Posted by flyte74

Ever since this leak happened I have been getting A LOT more spam texts to my phone. I haven't tried to confirm that my information was in fact leaked, but the substantial increase in spam texts coincides with the timing of the leak. No letter but that doesn't seem to be a good indicator either way.

Emails and phone numbers were not part of the doxxing.
These days it's easy to get spam from every direction.

All those sign up for the free giveaway contest and all that, that gets you on lists.

[johncage]

daily reminder, your information will be continually given to universities and other self proclaimed "academics" and "journalists", who will then leak it out to antifa. the moment the government allowed itself to give out this information, is when you were compromised. the leak was meant as notice served.

[CessnaDriver]

Originally Posted by johncage

daily reminder, your information will be continually given to universities and other self proclaimed "academics" and "journalists", who will then leak it out to antifa. the moment the government allowed itself to give out this information, is when you were compromised. the leak was meant as notice served.

This is important to remember. Those pointy heads loathe us and it’s nothing to them to break the law to screw is. Nobody will hold them accountable and they know it.

[Not-A-Gun-Grabber]

Originally Posted by johncage

the moment the government allowed itself to give out this information, is when you were compromised.

The moment the government allowed itself to COLLECT this information, is when we were compromised.

[igs]

Originally Posted by Not-A-Gun-Grabber

The moment the government allowed itself to COLLECT this information, is when we were compromised.

The moment you GAVE the government this information you were compromised.

[Capybara]

The moment you were born, you were compromised. SSN. Hospital records. School records. Sadly, I don't think this would have sat well with the founders but in 2022, privacy is a thing of the past.

[Puss]

To be honest, the information in the leak is not any more than what is on your driver's licences. That is, the PII in the leak includes:

• Your name
• Your address
• Your birth date
• Your sex

And that's it. Other info includes permit dates and type, but no other personal info. Your driver's licence has all this and more: your licence ID, your height and weight, and a picture of your face. Neither contain email or phone numbers, so obtaining that would be extra work. That said, there are web sites that collect this information so it is possible but tedious and one person at a time.

I've had my identity stolen and the advice is simple. Lock down your credit reports before a fraudster can access them. A full list of what to do is here:

https://www.identitytheft.gov/

And fate favors the prepared. Get your free credit reports now, have a look at them, and
then lock 'em down.

https://www.annualcreditreport.com/index.action
(The above is the only official site, others are scams)

[Mute]

Originally Posted by Puss

To be honest, the information in the leak is not any more than what is on your driver's licences. That is, the PII in the leak includes:

• Your name
• Your address
• Your birth date
• Your sex

And that's it. Other info includes permit dates and type, but no other personal info. Your driver's licence has all this and more: your licence ID, your height and weight, and a picture of your face. Neither contain email or phone numbers, so obtaining that would be extra work. That said, there are web sites that collect this information so it is possible but tedious and one person at a time.

I've had my identity stolen and the advice is simple. Lock down your credit reports before a fraudster can access them. A full list of what to do is here:

https://www.identitytheft.gov/

And fate favors the prepared. Get your free credit reports now, have a look at them, and
then lock 'em down.

https://www.annualcreditreport.com/index.action
(The above is the only official site, others are scams)

The problem with this leak is primarily two fold. First, is that it associates you with gun ownership and could make you a potential target for theft. Two, the combination of information they released could potentially give ID thieves an easy target. Regardless, this has all the appearance of a punitive action on the part of the DOJ for the Bruen ruling and a way to intimidate gun owners who are pursuing the right to carry a gun in public.

[NorCalBusa]

Originally Posted by Puss

To be honest, the information in the leak is not any more than what is on your driver's licences. That is, the PII in the leak includes:

• Your name
• Your address
• Your birth date
• Your sex

And that's it. Other info includes permit dates and type, but no other personal info. Your driver's licence has all this and more: your licence ID, your height and weight, and a picture of your face. Neither contain email or phone numbers, so obtaining that would be extra work. That said, there are web sites that collect this information so it is possible but tedious and one person at a time.

I've had my identity stolen and the advice is simple. Lock down your credit reports before a fraudster can access them. A full list of what to do is here:

https://www.identitytheft.gov/

And fate favors the prepared. Get your free credit reports now, have a look at them, and
then lock 'em down.

https://www.annualcreditreport.com/index.action
(The above is the only official site, others are scams)

Except by its existence, you've been identified as a gun(s) owner. Kind of a Sears Catalog for gun thieves.

[Puss]

Originally Posted by NorCalBusa

Except by its existence, you've been identified as a gun(s) owner. Kind of a Sears Catalog for gun thieves.

I suppose. Two counterpoints though.

• There are far more gun owners than there are CCW holders.
• The number of CCW holders is going to go way, way up.

There are about 30 CCW holders in Oakland, something like 11 in San Francisco. Easily these numbers will increase to over 10x their current value.

I did something stupid. I took my kid to the gun range, recorded him shooting, and gave him the video. He promptly published it on Instigram and made all the no-guns kids profoundly jealous. That said, no one has tried to steal our guns. I would be upset if my name was on the leaked list but unless someone is actually targeted, I'd say the risk profile is somewhat low.

[Stig]

So the letter I got says IDX will be the credit monitoring service we can use free for one year, deadline to apply is 10/08/2022. My question is each of these credit monitoring things are geared towards specific related incidents, and if we chose to use the IDX service will this create another list for others to go after and see who applied for IDX protection under the Ca DOJ breach issue?

Is it a good idea to even use this service offered by the State?

[mk2dave]

IDX website say they support 40M people, so the number of CCW holders would be statistically low. Whether you can trust a recommendation from the state is up to you to decide.

Many went the credit report route, filing fraud locks with the three companies. So far, no issues to report.

[Mark49]

Just a simple google search and by name DOB, Property owned, work type, address, who resides at my address and registered rep, and more. My girlfriend said she even knew my annual income and more.

[michigander]

I still haven’t received a letter, but was able to verify I was part of the leak. Any thoughts on what I sold do?

[Jimi Jah]

You trusted the state government and they betrayed you.

[Capybara]

I have not heard anything from Michel & Associates since filling out their initial form? Anyone else hear anything about a class action from them?

[Aragorn]

No. Nothing as well.

[Aragorn]

Anyone successfully pursue a follow up strategy to the response of the CA DOJs refusing to provide what specific PII of YOURS was compromised?

[ar15barrels]

Originally Posted by Aragorn

Anyone successfully pursue a follow up strategy to the response of the CA DOJs refusing to provide what specific PII of YOURS was compromised?

I don't know if they will ever answer, but here are the headers of the CCW file that was leaked:

County Code
Age Groups
Gender
Race Desc
Status Code
Address Type
Category Code
Ccw Record Id
Ccw Type Code
Cii Number
City
Date Of Birth
First Issue Date
First Name
gag
Last Issue Date
Last Name
Last Review Date
License Number
Middle Name
Notice Confirmation Date
Notice Sent Date
Ori Number
Primary Dob Txt
Prohibit Reason Code
Queue Record Id
Reset Filters
Status Eff Date
Status Expiration Date
Street Addr
Zip Code
Ages
CII NUMBER.y

If you were not issued a CCW with an issue date between 1-1-2012 and 12-31-2021, your name was not part of the leak.

[bruss01]

Did we ever receive an official account of exactly how and why this even happened?

To me, finding that out is every bit as important as doing the damage control on the back end. Maybe more so, in that you can't prevent a recurrence if you don't know what went wrong... or hold accountable anyone who was negligently or maliciously careless with the data.

[ar15barrels]

Originally Posted by bruss01

Did we ever receive an official account of exactly how and why this even happened?

To me, finding that out is every bit as important as doing the damage control on the back end. Maybe more so, in that you can't prevent a recurrence if you don't know what went wrong... or hold accountable anyone who was negligently or maliciously careless with the data.

It started with a law being passed that required the data to be made available to researchers.
The data was supposed to be stripped of PII.
It ended with the data being released before the PII was stripped.

What actually happened in between is likely to never be fully known.
It could have been incompetence fueled by a leader pushing for a quicker release.
It could have been a change of employees doing the work or the task being shifted from one employee to another who was not aware of the full requirements of the job.
It's more likely to be incompetence than maliciousness because we are talking about government employees after all.

[lastinline]

Originally Posted by ar15barrels

It's more likely to be incompetence than maliciousness because we are talking about government employees after all.

Oh, it’s more than simple incompetence. You are giving the buffoons the benefit of the doubt by letting them skate on incompetence. IMO, it’s extremely likely that this was done in spiteful anger, by a crooked AG that hates gun owners. The timing of it, in relation to the Bruen decision suggests so.
Now we can wait for one of these dog crap eating democrat politicians to author a bill to release ALL state held firearms data to “researchers”; it will pass, Ballsac will sign it, and there will be an even bigger leak.

[deadcoyote]

He’s not trying to defend the government, it’s just a Hanlon’s razor conceptual issue. I believe it’s roughly “Never ascribe to malice that which can be explained by incompetence.”

Although I’ve always been a believer in Hanlons razor I have to admit the recent FOIA exposure that the CIA covered up the naval strike of flight TWA 800 kind of highlighted a concerning amount reach. Like it seems crazy the FAA, NTSB, and FBI could all have been compromised and provided matching conclusions on their investigations.

[CessnaDriver]

Originally Posted by lastinline

Oh, it’s more than simple incompetence. You are giving the buffoons the benefit of the doubt by letting them skate on incompetence. IMO, it’s extremely likely that this was done in spiteful anger, by a crooked AG that hates gun owners. The timing of it, in relation to the Bruen decision suggests so.
Now we can wait for one of these dog crap eating democrat politicians to author a bill to release ALL state held firearms data to “researchers”; it will pass, Ballsac will sign it, and there will be an even bigger leak.

I think the highly suspect and damning thing is the "leak" was left leaking a long time. Not just an hour and fixed. It was left up long enough to be certain word got out all across the interwebz.

[BAJ475]

Originally Posted by ar15barrels

I don't know if they will ever answer, but here are the headers of the CCW file that was leaked:

County Code
Age Groups
Gender
Race Desc
Status Code
Address Type
Category Code
Ccw Record Id
Ccw Type Code
Cii Number
City
Date Of Birth
First Issue Date
First Name
gag
Last Issue Date
Last Name
Last Review Date
License Number
Middle Name
Notice Confirmation Date
Notice Sent Date
Ori Number
Primary Dob Txt
Prohibit Reason Code
Queue Record Id
Reset Filters
Status Eff Date
Status Expiration Date
Street Addr
Zip Code
Ages
CII NUMBER.y

If you were not issued a CCW with an issue date between 1-1-2012 and 12-31-2021, your name was not part of the leak.

So, it is likely that my information was leaked even though my CA CCW was no longer in effect due to my move to Idaho? I notified the issuing sheriff of the fact that I had become an Idaho resident. Not sure what address I gave them.

[SkyHawk]

Originally Posted by BAJ475

So, it is likely that my information was leaked even though my CA CCW was no longer in effect due to my move to Idaho? I notified the issuing sheriff of the fact that I had become an Idaho resident. Not sure what address I gave them.

Probably your old CA address, name and birthdate were leaked.

[Mark49]

I received my letter maybe a month or so after reading about it here. I've had a CCW here for over 30 years, I'll assume that made my records easy for them.

[cleonard]

Originally Posted by ar15barrels

It's more likely to be incompetence than maliciousness because we are talking about government employees after all.

It could have been malice disguised as incompetence. I give it about a 98% probablility.

[mshill]

Malice or incompetence... it does not matter. No one will be held to account for this.

[Capybara]

Originally Posted by mshill

Malice or incompetence... it does not matter. No one will be held to account for this.

It's already been months and months. This smacks of Holder and Obozo getting away with Fast & Furious. The politicians and AG that do this kind of crap should be behind bars at Gitmo but instead, it all gets ignored and swept under the rug.

[Usual_Suspect]

Originally Posted by mshill

Malice or incompetence... it does not matter. No one will be held to account for this.

Someone will be, it will be someone at the bottom of the food chain they want to get rid of because he isn't into water cooler politics or discussions, and doesn't tow the AG's line. Sad thing is, they are probably the most competent person working there.

[SharedShots]

Originally Posted by mshill

Malice or incompetence... it does not matter. No one will be held to account for this.

Originally Posted by Usual_Suspect

Someone will be, it will be someone at the bottom of the food chain they want to get rid of because he isn't into water cooler politics or discussions, and doesn't tow the AG's line. Sad thing is, they are probably the most competent person working there.

It rarely works that way. Lower staff are all in unions, just getting rid of someone or holding them accountable is very risky, it can quickly become a public affair. Those in lower ranks that are blamed but not truly guilty often start talking to everyone, that's the last thing they want. Instead, blame a middle manager, they have loyalty to those who will take care of them and insure their future upward mobility. It is those people who take one for the team, not the rank and file.

Middle managers can get moved around in a large circle to show something was done, punishments imposed and, in a year or so, a promotion, a tier increase for benefits and so on. Especially in state IT, middle managers get moved from agency to agency to do their penance and return to slaps on the back, planned promotions via appointment and so on.






.

[ProfChaos]

Originally Posted by Capybara

It's already been months and months. This smacks of Holder and Obozo getting away with Fast & Furious. The politicians and AG that do this kind of crap should be behind bars at Gitmo but instead, it all gets ignored and swept under the rug.

Only for those with a big (D) next to their name. Its full force of the ABC boys when its a (R).

[Drivedabizness]

Human systems simply cannot get as screwed up as DOJ's from simple incompetence.

The background check process is a Rube Goldberg setup REQUIRING maximum human intervention and CAUSING needless delay for the SOLE PURPOSE of preventing fast, successful processing that is the norm virtually everywhere else in the US.

The APPS database has at least a 50% error rate. Despite HUGE amounts of funding, NOTHING has been (or will be) done to clean it up. DOJ STILL sends excel spreadsheets to the Counties, monthly, to tell them who was added to the prohibited list (or who was removed). They DO NOT tell the Counties why someone dropped off. IF a County is proactive, they link with the Superior Court to get direct updates of who was adjudicated as prohibited, rather than wait for DOJ's monthly update.

Just as in 1A jurisprudence, where "absence of malice" (and now "presence of malice) has been a standard, it sure would be nice to have the State of CA labeled as having malice toward 2A rights - and treated that way in the Courts.

[curtisfong]

Originally Posted by Drivedabizness

Just as in 1A jurisprudence, where "absence of malice" (and now "presence of malice) has been a standard, it sure would be nice to have the State of CA labeled as having malice toward 2A rights - and treated that way in the Courts.

I had no idea this was a thing.

[92E2]

Originally Posted by Capybara

I have not heard anything from Michel & Associates since filling out their initial form? Anyone else hear anything about a class action from them?

That would be complete radio silence.

Not even a single response to the original inquiry email.

[OldGeek]

Originally Posted by NorCalBusa

Except by its existence, you've been identified as a gun(s) owner. Kind of a Sears Catalog for gun thieves.

More like "suicide by homeowner" where I live. Even the few tweekers we have know that country folk take the 2nd amendment and castle doctrine serious.