{"id":766,"date":"2022-04-18T19:11:04","date_gmt":"2022-04-18T19:11:04","guid":{"rendered":"https:\/\/sites.sandiego.edu\/cpil-blog\/?p=766"},"modified":"2022-04-23T18:28:03","modified_gmt":"2022-04-23T18:28:03","slug":"state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach","status":"publish","type":"post","link":"https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/","title":{"rendered":"State Bar\u2019s Chief Administrative Officer Provides Board with Summary and Update on Case Management System Data Breach"},"content":{"rendered":"<h3>By Andrea Lavelle<\/h3>\n<p>At the March 24th Board of Trustees meeting, Chief Administrative Officer Steve Mazer provided an <a href=\"https:\/\/perma.cc\/49TU-CCP8\">update<\/a> on the recent Odyssey case management system breach that exposed over 300,000 State Bar case records. Mazer gave an overview of the Bar\u2019s initial response after it learned of the system vulnerability, as well as its efforts to investigate and remedy the breach.<\/p>\n<p>On February 24, 2022, the Bar became aware that public and nonpublic State Bar case records appeared on judyrecords.com, a public website that aggregates nationwide court case records into a searchable database. Upon awareness of the breach, the Bar organized a response team of Bar staff, a third-party IT security firm of forensic investigators and security engineers, and the law firm Cooley LLP for legal assistance related to notifications to affected parties and potential remedies. The Bar also cooperated with Tyler Technologies, the company that makes the Odyssey case management portal. The preliminary investigation by Bar staff and the third-party IT firm showed exposure of 60,000 public and 260,000 nonpublic case records, and that the Odyssey portal was likely the source of the breach. Tyler Technologies confirmed that the Odyssey portal contained a vulnerability, and the portal was taken offline.<\/p>\n<p>Within 48 hours of awareness of the breach, the Bar issued a <a href=\"https:\/\/perma.cc\/9MM7-2WAT\">press release<\/a> and created a summary and FAQ <a href=\"https:\/\/perma.cc\/5B3Q-32EV\">webpage<\/a>. After seeing media coverage of the press release, judyrecords.com took the records offline and contacted the Bar to help resolve the issue. In the subsequent two weeks, Tyler Technologies and the Bar\u2019s third-party IT security firm continued to investigate to determine which nonpublic records had been posted and viewed on judyrecords.com. The number of records discovered to have been exposed was more than originally thought. Mazer presented the current number of confirmed posted records as 47,964 public and 322,525 nonpublic records, 188 of which contained personal information. Of the records posted, 60 public and 1,034 nonpublic records were viewed, including six that contained personal information. The information and cooperation from Tyler Technologies and judyrecords.com led the Bar to conclude that the breach was unintentional and that the Odyssey vulnerability caused nonpublic records to be accessed by judyrecords.com when it tried to obtain public records.<\/p>\n<p>On March 15, 2022, the Bar\u2019s case management portal was brought back online for public records access, after the Bar\u2019s IT staff and third-party IT firm installed Tyler Technologies\u2019 security fix. In addition to continuing the periodic security assessments regularly conducted prior to the breach, the Bar will add IT security reviews assisted by the third-party IT firm hired as a result of the breach.<\/p>\n<a class=\"synved-social-button synved-social-button-follow synved-social-size-32 synved-social-resolution-single synved-social-provider-facebook nolightbox\" data-provider=\"facebook\" target=\"_blank\" rel=\"nofollow\" title=\"Follow us on Facebook\" href=\"https:\/\/www.facebook.com\/CPILUSD\" style=\"font-size: 0px;width:32px;height:32px;margin:0;margin-bottom:5px;margin-right:5px\"><img loading=\"lazy\" decoding=\"async\" alt=\"Facebook\" title=\"Follow us on Facebook\" class=\"synved-share-image synved-social-image synved-social-image-follow\" width=\"32\" height=\"32\" style=\"display: inline;width:32px;height:32px;margin: 0;padding: 0;border: none;box-shadow: none\" src=\"https:\/\/sites.sandiego.edu\/cpil-blog\/wp-content\/plugins\/social-media-feather\/synved-social\/addons\/extra-icons\/image\/social\/circle\/64x64\/facebook.png\" \/><\/a><a class=\"synved-social-button synved-social-button-follow synved-social-size-32 synved-social-resolution-single synved-social-provider-twitter nolightbox\" data-provider=\"twitter\" target=\"_blank\" rel=\"nofollow\" title=\"Follow us on Twitter\" href=\"https:\/\/twitter.com\/cpilusd\" style=\"font-size: 0px;width:32px;height:32px;margin:0;margin-bottom:5px\"><img loading=\"lazy\" decoding=\"async\" alt=\"twitter\" title=\"Follow us on Twitter\" class=\"synved-share-image synved-social-image synved-social-image-follow\" width=\"32\" height=\"32\" style=\"display: inline;width:32px;height:32px;margin: 0;padding: 0;border: none;box-shadow: none\" src=\"https:\/\/sites.sandiego.edu\/cpil-blog\/wp-content\/plugins\/social-media-feather\/synved-social\/addons\/extra-icons\/image\/social\/circle\/64x64\/twitter.png\" \/><\/a>","protected":false},"excerpt":{"rendered":"<p>By Andrea Lavelle At the March 24th Board of Trustees meeting, Chief Administrative Officer Steve Mazer provided an update on the recent Odyssey case management system breach that exposed over 300,000 State Bar case records. Mazer gave an overview of <a class=\"more-link\" href=\"https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1013,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[132920,132884],"tags":[138089,138091,138092,386,132886,138090],"coauthors":[132864],"class_list":["post-766","post","type-post","status-publish","format-standard","hentry","category-major-projects-state-bar-of-california","category-state-bar-of-california","tag-data-breach","tag-judyrecords-com","tag-odyssey","tag-security","tag-state-bar","tag-tyler-technologies"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>State Bar\u2019s Chief Administrative Officer Provides Board with Summary and Update on Case Management System Data Breach - Consumer Protection Policy Center - Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"og:locale\" content=\"en_US\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"og:type\" content=\"article\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"og:title\" content=\"State Bar\u2019s Chief Administrative Officer Provides Board with Summary and Update on Case Management System Data Breach - Consumer Protection Policy Center - Blog\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"og:description\" content=\"By Andrea Lavelle At the March 24th Board of Trustees meeting, Chief Administrative Officer Steve Mazer provided an update on the recent Odyssey case management system breach that exposed over 300,000 State Bar case records. Mazer gave an overview of Continue reading &rarr;\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"og:url\" content=\"https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"og:site_name\" content=\"Consumer Protection Policy Center - Blog\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"article:published_time\" content=\"2022-04-18T19:11:04+00:00\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"article:modified_time\" content=\"2022-04-23T18:28:03+00:00\" class=\"yoast-seo-meta-tag\" \/>\n<meta name=\"author\" content=\"Katie Gonzalez\" class=\"yoast-seo-meta-tag\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" class=\"yoast-seo-meta-tag\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" class=\"yoast-seo-meta-tag\" \/>\n\t<meta name=\"twitter:data1\" content=\"Katie Gonzalez\" class=\"yoast-seo-meta-tag\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" class=\"yoast-seo-meta-tag\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" class=\"yoast-seo-meta-tag\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/\"},\"author\":{\"name\":\"Katie Gonzalez\",\"@id\":\"https:\/\/sites.sandiego.edu\/cpil-blog\/#\/schema\/person\/fdc87a266320b80c7a790bdc2a17df69\"},\"headline\":\"State Bar\u2019s Chief Administrative Officer Provides Board with Summary and Update on Case Management System Data Breach\",\"datePublished\":\"2022-04-18T19:11:04+00:00\",\"dateModified\":\"2022-04-23T18:28:03+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/\"},\"wordCount\":446,\"commentCount\":0,\"keywords\":[\"data breach\",\"judyrecords.com\",\"Odyssey\",\"security\",\"State Bar\",\"tyler technologies\"],\"articleSection\":[\"Major Projects\",\"State Bar of California\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/\",\"url\":\"https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/\",\"name\":\"State Bar\u2019s Chief Administrative Officer Provides Board with Summary and Update on Case Management System Data Breach - Consumer Protection Policy Center - Blog\",\"isPartOf\":{\"@id\":\"https:\/\/sites.sandiego.edu\/cpil-blog\/#website\"},\"datePublished\":\"2022-04-18T19:11:04+00:00\",\"dateModified\":\"2022-04-23T18:28:03+00:00\",\"author\":{\"@id\":\"https:\/\/sites.sandiego.edu\/cpil-blog\/#\/schema\/person\/fdc87a266320b80c7a790bdc2a17df69\"},\"breadcrumb\":{\"@id\":\"https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/sites.sandiego.edu\/cpil-blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"State Bar\u2019s Chief Administrative Officer Provides Board with Summary and Update on Case Management System Data Breach\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/sites.sandiego.edu\/cpil-blog\/#website\",\"url\":\"https:\/\/sites.sandiego.edu\/cpil-blog\/\",\"name\":\"Consumer Protection Policy Center - Blog\",\"description\":\"We work to protect and advance a reality where every citizen is protected by a government that is ethical, accountable, and transparent.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/sites.sandiego.edu\/cpil-blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/sites.sandiego.edu\/cpil-blog\/#\/schema\/person\/fdc87a266320b80c7a790bdc2a17df69\",\"name\":\"Katie Gonzalez\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"\/\/www.gravatar.com\/avatar\/367bf8ae36ed938af8637f2b96d85412?s=96&#038;r=g&#038;d=mmc97f81d333fa3b469936c6ead32ef1d5\",\"url\":\"\/\/www.gravatar.com\/avatar\/367bf8ae36ed938af8637f2b96d85412?s=96&#038;r=g&#038;d=mm\",\"contentUrl\":\"\/\/www.gravatar.com\/avatar\/367bf8ae36ed938af8637f2b96d85412?s=96&#038;r=g&#038;d=mm\",\"caption\":\"Katie Gonzalez\"},\"url\":\"https:\/\/sites.sandiego.edu\/cpil-blog\/author\/katie-gonzalez_gonzalez\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"State Bar\u2019s Chief Administrative Officer Provides Board with Summary and Update on Case Management System Data Breach - Consumer Protection Policy Center - Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/","og_locale":"en_US","og_type":"article","og_title":"State Bar\u2019s Chief Administrative Officer Provides Board with Summary and Update on Case Management System Data Breach - Consumer Protection Policy Center - Blog","og_description":"By Andrea Lavelle At the March 24th Board of Trustees meeting, Chief Administrative Officer Steve Mazer provided an update on the recent Odyssey case management system breach that exposed over 300,000 State Bar case records. Mazer gave an overview of Continue reading &rarr;","og_url":"https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/","og_site_name":"Consumer Protection Policy Center - Blog","article_published_time":"2022-04-18T19:11:04+00:00","article_modified_time":"2022-04-23T18:28:03+00:00","author":"Katie Gonzalez","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Katie Gonzalez","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/#article","isPartOf":{"@id":"https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/"},"author":{"name":"Katie Gonzalez","@id":"https:\/\/sites.sandiego.edu\/cpil-blog\/#\/schema\/person\/fdc87a266320b80c7a790bdc2a17df69"},"headline":"State Bar\u2019s Chief Administrative Officer Provides Board with Summary and Update on Case Management System Data Breach","datePublished":"2022-04-18T19:11:04+00:00","dateModified":"2022-04-23T18:28:03+00:00","mainEntityOfPage":{"@id":"https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/"},"wordCount":446,"commentCount":0,"keywords":["data breach","judyrecords.com","Odyssey","security","State Bar","tyler technologies"],"articleSection":["Major Projects","State Bar of California"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/","url":"https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/","name":"State Bar\u2019s Chief Administrative Officer Provides Board with Summary and Update on Case Management System Data Breach - Consumer Protection Policy Center - Blog","isPartOf":{"@id":"https:\/\/sites.sandiego.edu\/cpil-blog\/#website"},"datePublished":"2022-04-18T19:11:04+00:00","dateModified":"2022-04-23T18:28:03+00:00","author":{"@id":"https:\/\/sites.sandiego.edu\/cpil-blog\/#\/schema\/person\/fdc87a266320b80c7a790bdc2a17df69"},"breadcrumb":{"@id":"https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/sites.sandiego.edu\/cpil-blog\/2022\/04\/18\/state-bars-chief-administrative-officer-provides-board-with-summary-and-update-on-case-management-system-data-breach\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/sites.sandiego.edu\/cpil-blog\/"},{"@type":"ListItem","position":2,"name":"State Bar\u2019s Chief Administrative Officer Provides Board with Summary and Update on Case Management System Data Breach"}]},{"@type":"WebSite","@id":"https:\/\/sites.sandiego.edu\/cpil-blog\/#website","url":"https:\/\/sites.sandiego.edu\/cpil-blog\/","name":"Consumer Protection Policy Center - Blog","description":"We work to protect and advance a reality where every citizen is protected by a government that is ethical, accountable, and transparent.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/sites.sandiego.edu\/cpil-blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/sites.sandiego.edu\/cpil-blog\/#\/schema\/person\/fdc87a266320b80c7a790bdc2a17df69","name":"Katie Gonzalez","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"\/\/www.gravatar.com\/avatar\/367bf8ae36ed938af8637f2b96d85412?s=96&#038;r=g&#038;d=mmc97f81d333fa3b469936c6ead32ef1d5","url":"\/\/www.gravatar.com\/avatar\/367bf8ae36ed938af8637f2b96d85412?s=96&#038;r=g&#038;d=mm","contentUrl":"\/\/www.gravatar.com\/avatar\/367bf8ae36ed938af8637f2b96d85412?s=96&#038;r=g&#038;d=mm","caption":"Katie Gonzalez"},"url":"https:\/\/sites.sandiego.edu\/cpil-blog\/author\/katie-gonzalez_gonzalez\/"}]}},"_links":{"self":[{"href":"https:\/\/sites.sandiego.edu\/cpil-blog\/wp-json\/wp\/v2\/posts\/766","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sites.sandiego.edu\/cpil-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sites.sandiego.edu\/cpil-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sites.sandiego.edu\/cpil-blog\/wp-json\/wp\/v2\/users\/1013"}],"replies":[{"embeddable":true,"href":"https:\/\/sites.sandiego.edu\/cpil-blog\/wp-json\/wp\/v2\/comments?post=766"}],"version-history":[{"count":2,"href":"https:\/\/sites.sandiego.edu\/cpil-blog\/wp-json\/wp\/v2\/posts\/766\/revisions"}],"predecessor-version":[{"id":786,"href":"https:\/\/sites.sandiego.edu\/cpil-blog\/wp-json\/wp\/v2\/posts\/766\/revisions\/786"}],"wp:attachment":[{"href":"https:\/\/sites.sandiego.edu\/cpil-blog\/wp-json\/wp\/v2\/media?parent=766"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sites.sandiego.edu\/cpil-blog\/wp-json\/wp\/v2\/categories?post=766"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sites.sandiego.edu\/cpil-blog\/wp-json\/wp\/v2\/tags?post=766"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/sites.sandiego.edu\/cpil-blog\/wp-json\/wp\/v2\/coauthors?post=766"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}