Updated at 7:00 PM to include new information about the source of the exposed attorney discipline files.

California’s state bar on Monday blamed a “previously unknown security vulnerability” in its case management system for exposing confidential data from 260,000 attorney discipline records that a third-party data aggregator posted on its website.