HackingHealthcareHealthcareCustomer Data InvolvedPHIHealth (basic)Identity (basic)Government IDMediumContained

Hutton & Hale, D.D.S.

bd_06d0aaffe1125f19 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 7, 2020

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

63%

Full breach record for Hutton & Hale, D.D.S. →

Dr. Ann Hale, D.D.S. (Hutton & Hale, D.D.S., Inc.) reported a data breach occurring on May 25, 2020, where an individual gained unauthorized access to databases containing patient personal health information. Affected data included names, addresses, phone numbers, and potentially Social Security Numbers and x-ray data. The organization implemented additional security safeguards and offered identity theft protection services to affected patients.

J jump to incidentP pin to compareR raw source

Incident timeline

May 25, 2020

Begins

Jul 7, 2020

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_2d50c9e541d01c042020-07-08 · +1dVerified by operator

Name: Hutton & Hale, D.D.S.
norm: hutton hale dds

Name: Hutton & Hale, D.D.S.
norm: hutton hale dds
Industry: Healthcarellm

Discovered: —
Breach occurred: May 25, 2020
Materiality determined: —
Notification sent: Jul 8, 2020
Affected individuals: Not disclosed
Data types: PHIHealth (basic)Identity (basic)Government ID
Data elements: Social Security numberMedical information
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Implementing additional safeguards to improve data security on our web server infrastructure
Taking additional steps to protect patient related data from theft or similar criminal activity in the future
Offering identity theft protection services through ID Experts
Changes made: Implementing additional safeguards to improve data security on our web server infrastructure
Taking additional steps to protect patient related data from theft or similar criminal activity in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

California State AGJul 7 · first · this page

HHS OCR+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-191787
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 7, 2020
Raw hash: ae637f9b9c08743117443538a1d34b5b3b9a8328554c3b553b51b757ac16925f

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityHutton & Hale, D.D.S.

Victim entityHutton & Hale, D.D.S.

IncidentUnauthorized Access

Stated responseImplementing additional safeguards to improve data security on our web server infrastructure

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov