HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)Multi-Stage ChainIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
AltaMed Health Services Corporation
bd_0d3a3d7832c1fd3e · schema v1 · pii pii-v1
Full breach record for AltaMed Health Services Corporation →AltaMed Health Services Corporation reported a data breach involving its business associate, Sharecare Health Data Services (SHDS). An unauthorized third party accessed SHDS's network starting May 21, 2018, obtaining patient files containing names, addresses, DOBs, and medical record numbers. SHDS detected the activity on June 22, 2018, engaged forensic investigators, and notified the FBI. AltaMed provided initial notifications in Feb 2019 and supplemental notifications in May 2019, offering 12 months of credit monitoring via AllClear ID.
California clockDiscovered Jun 22, 2018 → Notified May 30, 2019342d ✗ CA 60-day late49 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-147718
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 30, 2019
- Raw hash
- d56ce28c5bce1d31e87265341e2d67d15eaf322c8efedac3c1c7a8c7f7150fde
Reporting entity
- Name
- AltaMed Health Services Corporationnorm: altamed health
Victim entity
- Name
- AltaMed Health Services Corporationnorm: altamed health
Incident
- Discovered
- Jun 22, 2018
- Materiality determined
- —
- Notification sent
- May 30, 2019
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified the Federal Bureau of Investigation (FBI)
- Third party
- via Sharecare Health Data Servicesbusiness associate
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 49 weeks(342 days from discovery to filing)
- Compliance flags
- CA 60-day late · 342d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 22, 2018→ Notified: May 30, 2019342d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.