HackingData ExfiltratedCustomer Data InvolvedPHIHEALTH_BASICLowContained
COMMUNITY RESEARCH FOUNDATION, INC.
bd_090a863c4f2966f2 · schema v1 · pii pii-v1
Full breach record for COMMUNITY RESEARCH FOUNDATION, INC. →Community Research Foundation (CRF) notified the California Attorney General of a data breach affecting protected health information (PHI). The incident occurred between October 6 and October 13, 2022, and was discovered on October 13, 2022. An unauthorized actor accessed files and data within CRF's systems. CRF engaged external cybersecurity experts, secured its environment, and offered 12 months of complimentary identity protection services via Experian to affected individuals.
California clockDiscovered Oct 13, 2022 → Notified Jun 29, 2023259d ✗ CA 60-day late37 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_89acd6c85baa9ce6Leak Sitealphvfiled 2022-11-16(225d gap)Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-568653
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 29, 2023
- Raw hash
- d240da95cb4e1d0bec2e8bd4f8f242e9664864dc9264525f34b5724076d6a2f5
Reporting entity
- Name
- COMMUNITY RESEARCH FOUNDATION, INC.norm: community research
Victim entity
- Name
- COMMUNITY RESEARCH FOUNDATION, INC.norm: community research
Incident
- Discovered
- Oct 13, 2022
- Materiality determined
- —
- Notification sent
- Jun 29, 2023
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 37 weeks(259 days from discovery to filing)
- Compliance flags
- CA 60-day late · 259dLeak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 13, 2022→ Notified: Jun 29, 2023259d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.