MisuseNathalie CollinsIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIMediumContained
Be Forever Hair Free
bd_0027137552ab6ace · schema v1 · pii pii-v1
Full breach record for Be Forever Hair Free →Hair Free Forever, a California-based hair removal clinic, disclosed a data breach involving a former employee, Nathalie Collins, who stole patient records. The incident involved PHI and PII (names, addresses, birth dates, medical history, and intimate photos). The company reported the breach to HHS and OCR, secured the data, and notified affected individuals.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-136762
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 3, 2018
- Raw hash
- ce76417019f3e48dfa88d34a82a071df27f78a9be90dd1b8bc2d1af0488904ff
Reporting entity
- Name
- Hair Free Forevernorm: hair free forever
Victim entity
- Name
- Be Forever Hair Freenorm: be forever hair free
- Domain
- foreverhairfree.com
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Insider· Nathalie Collins
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- Nathalie CollinsInternalGrudge
- Regulator citations
- Reported to Health and Human Services (HHS)Filed patient confidentiality/safety incident complaints with the Office of Civil Rights (OCR)
- Initial access
- insider_action
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.