Cal. Elec. Code § 2188.3

A person or entity who has received voter registration information pursuant to an application made under Section 2188 shall, following discovery or notification of a breach in the security of the storage of the information, disclose the breach in security to the Secretary of State. The disclosure shall be made in the most expedient time possible and without unreasonable delay.