San Diego Police Department employee data breached through a vulnerability on website

The San Diego Police Department confirmed that a file containing personal details of its employees, including names and contact information, was unintentionally made accessible on its website in early January. Lt. Daniel Meyer, a department spokesman, acknowledged the issue although he called it a 'vulnerability' that potentially exposed members' personal identifying information. This breach came to light only after an external individual discovered and reported the exposed data.

Upon learning about the issue, the city promptly responded to prevent further unauthorized data access. The department has confirmed that some members' information was indeed accessed and is actively working to notify affected individuals.

The department is still assessing the full scope of the breach. Lt. Meyer assured that affected members would be contacted, informed about their exposed information, and provided with necessary resources for remediation. Assistant Chief Scott Wahl added that the compromised data included information related to COVID-19 symptoms but not vaccination status.