MisuseData MishandlingDelayed DiscoveryData ExfiltratedIDENTITY_BASICHEALTH_BASICPHILowContained
GUARDANT HEALTH, INC.
bd_0cc35de939dca402 · schema v1 · pii pii-v1
Full breach record for GUARDANT HEALTH, INC. →Guardant Health, Inc. notified Vermont AG that an employee inadvertently made a file containing patient personal and medical information publicly accessible in October 2020. Unidentified third parties copied the file between September 2023 and February 2024. Data included names, ages, medical record numbers, and test results; no SSNs or financial data were involved.
Vermont clock⏱ VT AG >14 bday9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_667d31d8ec325fcaMontana State AGfiled 2024-05-03Verified
- bd_bf30833a7e61dbb3California State AGfiled 2024-05-03Verified
- bd_dc3c65f1e089173fHHS OCRfiled 2024-04-26(7d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-05-03-guardant-health-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 3, 2024
- Raw hash
- 4a812355b79aaec2c6a8d6589f56be89a3929a52c8d000bb39e2f4f323164885
Reporting entity
- Name
- GUARDANT HEALTH, INC.norm: guardant health
- Domain
- guardanthealth.com
Victim entity
- Name
- GUARDANT HEALTH, INC.norm: guardant health
- Domain
- guardanthealth.com
Incident
- Discovered
- Mar 4, 2024
- Materiality determined
- —
- Notification sent
- May 3, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICHEALTH_BASICPHI
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- Internal
- Initial access
- insider_action
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.