HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumActive
Bako Diagnostics
bd_0836614151f066cb · schema v1 · pii pii-v1
Full breach record for Bako Diagnostics →Bako Diagnostics, a California-based laboratory services provider, disclosed a data breach occurring between December 21-28, 2021. An unauthorized third party accessed systems containing personal information of patients. Affected data included names, DOBs, addresses, health insurance details, medical records, and billing information. BakoDx engaged forensic investigators, notified law enforcement, and offered 12 months of credit monitoring via Kroll. The investigation was ongoing at the time of filing.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_21793e71e567d113Montana State AGfiled 2022-02-25Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-551229
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 25, 2022
- Raw hash
- 384a2945a1a969011e09914493b4678bbc1a59838141ab71172bf67ec9cd5ee5
Reporting entity
- Name
- Bako Diagnosticsnorm: bako diagnostics
- Domain
- bakodx.com
Victim entity
- Name
- Bako Diagnosticsnorm: bako diagnostics
- Domain
- bakodx.com
Incident
- Discovered
- Dec 28, 2021
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Submitted breach notification to California Office of the Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.