Insulet Corporation
bd_09375a81f3d038e8 · schema v1 · pii pii-v1
Full breach record for Insulet Corporation →Insulet Corporation disclosed a data privacy incident involving the exposure of limited protected health information (PHI) for Omnipod DASH customers. Due to a misconfiguration of web pages used for receipt verification of a Medical Device Correction letter, customer IP addresses, product usage status, and Personal Diabetes Manager usage were exposed to website performance and marketing partners via cookies and trackers. The incident occurred on December 1, 2022, and was discovered on December 6, 2022. Insulet disabled tracking codes and requested partner log deletion. No financial information, SSNs, emails, or passwords were exposed.
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_b72b9465f971309eMontana State AGfiled 2023-01-09(1d gap)Verified
- bd_4b77c0e779b47ea3Delaware State AGfiled 2023-01-05(5d gap)Verified
- bd_c92cd96665cb3150Delaware State AGfiled 2022-12-21(20d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-561488
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 10, 2023
- Raw hash
- 2726dcaaae7995389186d5c03e4b6159a1656504e1b11f4b093f9b094c3a093b
Reporting entity
- Name
- Insulet Corporationnorm: insulet
- Domain
- insulet.com
Victim entity
- Name
- Insulet Corporationnorm: insulet
- Domain
- insulet.com
Incident
- Discovered
- Dec 6, 2022
- Materiality determined
- —
- Notification sent
- Jan 5, 2023
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICLOCATIONMETADATA
- Attack vector
- Misconfiguration
- Third party
- via Insulet website performance and marketing partners
Compliance
- Time to disclose
- 5 weeks(35 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 6, 2022→ Notified: Jan 5, 202330d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.