Peninsula Corridor Joint Powers Board

Files holding names and Social Security numbers tied to Caltrain may have been accessed at Turbo Data Systems, the vendor that processes its citation payments, where unauthorized access was detected in November 2024. Caltrain learned its data was involved a year later, and the California Attorney General heard nearly a year after that. The source names no entry point, no actor, and no count. Every handoff between the two companies added months, and the Social Security numbers waited through each one.