California Lottery Faces Scrutiny After $12M Winner's Address Mistakenly Published

Sacramento, CA – A significant privacy lapse by the California Lottery has come to light following the inadvertent disclosure of a multi-million-dollar winner's residential address. Raul Servellon de Leo, who secured a $12 million SuperLotto Plus jackpot, saw his personal location mistakenly published in an official press release, a move that starkly contrasts with the customary desire for anonymity among major prize recipients.

The unfortunate incident occurred when the California Lottery confused de Leo’s private residence with the address of King Wine & Liquor 2 in Sacramento, the retail outlet where the winning ticket for the November 29, 2025, drawing was purchased. While the name of a California lottery winner is part of public record, safeguarding their home address is typically a top priority, a standard that was clearly breached in this instance. The error led to the winner’s sensitive personal information being made publicly accessible through an official communication channel.

In response to the error, the California Lottery promptly issued a statement acknowledging the misstep and emphasizing its commitment to player privacy. A spokesperson stated, "Protecting player privacy and ensuring accurate information are top priorities for the California Lottery." They further explained that this type of incident was unprecedented for the organization and pledged to "review our protocols to ensure this doesn’t occur again." The lottery expressed regret, adding, "We regret the mistake and appreciate the public’s understanding as we work quickly to ensure all information shared is accurate and secure." This swift damage control highlights the seriousness with which the organization views such disclosures.

Despite the lottery's immediate remedial actions, the incident may carry legal ramifications. Mr. de Leo retains the option to pursue a lawsuit, potentially seeking recompense for the breach of his private data. For a successful claim, however, legal experts suggest de Leo would need to demonstrate that the disclosure, beyond being regrettable, has led to tangible adverse effects on his private life or security. The challenge will be to link the public exposure of his address directly to specific negative consequences.

This episode underscores the critical importance of robust data privacy protocols within public institutions, especially those handling significant financial transactions and personal information. As Mr. de Leo contemplates his next steps, the California Lottery faces increased scrutiny regarding its internal procedures, ensuring that the newfound wealth of its winners does not come at the cost of their personal safety or peace of mind.