People whose citation payments ran through Turbo Data Systems, a vendor for California agencies including Caltrain, received notice that files holding their names and Social Security numbers may have been accessed during a November 2024 network incident. No lawsuit or settlement has been reported, so there is nothing to claim; Turbo Data Systems is offering 12 months of free credit monitoring.
What Happened?
The Peninsula Corridor Joint Powers Board, which operates Caltrain, filed a data breach notice with the California Attorney General on November 3, 2026. The incident happened at Turbo Data Systems (TDS), which the letter describes as providing processing services for agencies and municipalities throughout California.According to the letter, TDS experienced a network disruption in November 2024 that interrupted its services. Its investigation with cybersecurity specialists found that some files related to its citation payment services may have been accessed without authorization around November 21, 2024. TDS says it then conducted a comprehensive review of the files, learned on November 21, 2025 that some individuals’ information was involved, and worked with the agency to confirm contact information before sending notices. TDS says it notified the FBI.
The sample letter in the California filing is marked as a draft and uses a placeholder for the agency name. Neither TDS nor Caltrain has publicly said how many people were affected or which other agencies’ records were involved.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
Why the Notice Came Two Years Later
The letter lays out a long gap between the attack and the notices. TDS says the unauthorized access happened around November 21, 2024, and that it was not until November 21, 2025, after a review of the affected files, that it confirmed individuals’ information was involved. It then worked with the agency to confirm contact information, and Caltrain’s notice was filed with the California Attorney General on November 3, 2026.What TDS Is Offering
TDS is offering 12 months of credit monitoring and identity protection services at no cost through Cyberscout, a TransUnion company, including a $1,000,000 identity theft insurance policy and fraud assistance. Enrollment is online with the unique code in each letter and must be completed within 90 days from the date of the letter. The letter says enrollment requires an internet connection and an email account and may not be available to people under 18.Is There a Lawsuit?
No class action over the Turbo Data Systems incident has been reported as of November 6, 2026, and there is no settlement or claim form. Any complaint would make allegations that TDS could contest. OCA will update this page if one is filed.Questions
What is Turbo Data Systems?
Turbo Data Systems (TDS) is a vendor that provides processing services for agencies and municipalities in California, including citation payment services. The files involved in its breach related to those citation payment services.
Why did Caltrain send a data breach notice?
The Peninsula Corridor Joint Powers Board, which operates Caltrain, filed the Turbo Data Systems notice with the California Attorney General on November 3, 2026. The letter says TDS worked with the agency to confirm contact information before notifying the people involved.
What information was exposed in the Turbo Data Systems breach?
The letter says the information may have included a person’s name and Social Security number. TDS says it has no evidence the information was used to commit identity theft or fraud.
Is there a Turbo Data Systems data breach lawsuit or settlement?
No lawsuit or settlement over the Turbo Data Systems incident has been reported as of November 6, 2026, so there is nothing to claim. TDS is offering 12 months of free credit monitoring through Cyberscout, with enrollment open for 90 days from the date of each letter.
Sources
• California Attorney General, Submitted Breach Notification Sample: Peninsula Corridor Joint Powers Board (Caltrain) (reported November 3, 2026)• Turbo Data Systems, “Notice of Data Breach” sample letter (PDF, filed with the California Attorney General)
