Class was not thread-safe: - external byte array was stored directly - List was created and then modified via the final variable Fixed by copying byte array and storing List once as unmodifiable List