4 ms·

>Those records were publicly available. The very first paragraph of the article seems to contradict that. Do you have a source that says otherwise?

deleted 5y ago
[deleted]
dahfizz 5y ago
> Was this a hack? And how did this happen? > We do not know yet. The State Bar’s Odyssey case management system software vendor, Tyler Technologies, has been tasked with investigating what happened, taking the steps needed to rectify the breach, and ensuring something similar does not happen again. The State Bar also retained a team of IT forensics experts to assist in our investigation. > The site owner claims that the State Bar’s confidential and public case records were all previously available at a public URL. Is this true? > The State Bar Court website allows the public to search for publicly available case information. The extent to which the external aggregating website was able to obtain nonpublic information that was stored in the Odyssey case management system is still being investigated. It sounds extremely likely that the state bar had a website misconfigured, and the automated systems of the aggregation site sucked down all the data it was technically (but not legally) given access to. https://www.calbar.ca.gov/About-Us/News/Data-Breach-Updates https://www.calbar.ca.gov/About-Us/News/Data-Breach-Updates
ejb999 5y ago
According to the Bar website: >>>The site owner (of judyrecords) claims that the State Bar’s confidential and public case records were all previously available at a public URL. Is this true? >>>The State Bar Court website allows the public to search for publicly available case information. The extent to which the external aggregating website was able to obtain nonpublic information that was stored in the Odyssey case management system is still being investigated. I am inclined to believe judyrecords, until proven otherwise.
- 5ESS 5y ago
  It’s pretty gross that they won’t admit they made a mistake and instead choose to mislead the public using deceptive language.
  - ejb999 5y ago
    Yep, not unlike the other recent story where someone scraped a website and ended up pulling in SSN's and other personal information that was on the page, but not visible (but in the html) - and then the government threatened to prosecute the person who reported the problem. A perfect example why MORE public information is better than less.
  - aksss 5y ago
    Well, it’s the CA state bar - it’s the den for all the lawyers in a juggernaut state. Misdirection through deceptive - sorry persuasive - language is literally what a goodly number of them do every day for a living.

deleted 5y ago

[deleted]

dahfizz 5y ago

> Was this a hack? And how did this happen? > We do not know yet. The State Bar’s Odyssey case management system software vendor, Tyler Technologies, has been tasked with investigating what happened, taking the steps needed to rectify the breach, and ensuring something similar does not happen again. The State Bar also retained a team of IT forensics experts to assist in our investigation. > The site owner claims that the State Bar’s confidential and public case records were all previously available at a public URL. Is this true? > The State Bar Court website allows the public to search for publicly available case information. The extent to which the external aggregating website was able to obtain nonpublic information that was stored in the Odyssey case management system is still being investigated. It sounds extremely likely that the state bar had a website misconfigured, and the automated systems of the aggregation site sucked down all the data it was technically (but not legally) given access to. https://www.calbar.ca.gov/About-Us/News/Data-Breach-Updates https://www.calbar.ca.gov/About-Us/News/Data-Breach-Updates

ejb999 5y ago

According to the Bar website: >>>The site owner (of judyrecords) claims that the State Bar’s confidential and public case records were all previously available at a public URL. Is this true? >>>The State Bar Court website allows the public to search for publicly available case information. The extent to which the external aggregating website was able to obtain nonpublic information that was stored in the Odyssey case management system is still being investigated. I am inclined to believe judyrecords, until proven otherwise.

5ESS 5y ago
It’s pretty gross that they won’t admit they made a mistake and instead choose to mislead the public using deceptive language.
- ejb999 5y ago
  Yep, not unlike the other recent story where someone scraped a website and ended up pulling in SSN's and other personal information that was on the page, but not visible (but in the html) - and then the government threatened to prosecute the person who reported the problem. A perfect example why MORE public information is better than less.
- aksss 5y ago
  Well, it’s the CA state bar - it’s the den for all the lawyers in a juggernaut state. Misdirection through deceptive - sorry persuasive - language is literally what a goodly number of them do every day for a living.