HackingCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASICMediumContained
Southwest Behavioral Health Center
bd_03483029fe43bcdb · schema v1 · pii pii-v1
Full breach record for Southwest Behavioral Health Center →Southwest Behavioral Health Center discovered a sophisticated cybersecurity attack on March 13, 2023. The incident potentially exposed names, dates of birth, Social Security numbers, and limited medical/health record information for current and former clients, patients, and employees. The organization engaged forensic investigators, notified the FBI, and offered credit monitoring services. No financial or credit card data was impacted.
California clockDiscovered Mar 13, 2023 → Notified Nov 9, 2023241d ✗ CA 60-day late36 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed40 affectedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-576762
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 19, 2023
- Raw hash
- 997fbeee6d01b5604e86d30d9a1f48e423ad13ef064432c00fe48e6b9dec2082
Reporting entity
- Name
- Southwest Behavioral Health Centernorm: southwest behavioral health center
- Domain
- sbhc.us
Victim entity
- Name
- Southwest Behavioral Health Centernorm: southwest behavioral health center
- Domain
- sbhc.us
Incident
- Discovered
- Mar 13, 2023
- Materiality determined
- —
- Notification sent
- Nov 9, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified the Federal Bureau of Investigation
Compliance
- Time to disclose
- 36 weeks(251 days from discovery to filing)
- Compliance flags
- CA 60-day late · 241d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 13, 2023→ Notified: Nov 9, 2023241d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.