HackingDelayed DiscoveryData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIMediumActive
University of California, Los Angeles Health
bd_0c9ea43643627ff0 · schema v1 · pii pii-v1
Full breach record for University of California, Los Angeles Health →UCLA Health reported a cyberattack in California affecting patient data including names, SSNs, DOBs, and medical records. The breach occurred as early as September 2014, discovered May 2015. FBI and forensic experts are investigating. ID Experts provided credit monitoring and identity theft recovery services.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_eef61580e59756acHHS OCRfiled 2015-07-17Verified
- bd_5ca3b58d29fa8c48Hawaii State AGfiled 2015-07-22(5d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-57068
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 17, 2015
- Raw hash
- d3c73cc53a3082d29b8f4d42103eb1d68deec479b2f043d454ff353a401a179f
Reporting entity
- Name
- University of California, Los Angeles Healthnorm: university of california los angeles health
- Domain
- uclahealth.org
Victim entity
- Name
- University of California, Los Angeles Healthnorm: university of california los angeles health
- Domain
- uclahealth.org
Incident
- Discovered
- May 5, 2015
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified and working with the Federal Bureau of Investigation
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 weeks(73 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.