DisclosureLens
HackingHealthcareHealthcareSupply Chain (3P Vendor)Business Associate (HIPAA)Data ExfiltratedCustomer Data InvolvedPHIIdentity (basic)Health (basic)LowContained

AltaMed Health Services Corporation

bd_0d3a3d7832c1fd3e · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 22, 2018

Filed

May 30, 2019

To disclose

49 weeks

Affected

Not disclosed

Confidence

66%
Full breach record for AltaMed Health Services Corporation →9 incidents on file

AltaMed Health Services Corporation notified patients of a data breach involving its business associate, Sharecare Health Data Services (SHDS). An unauthorized third party accessed SHDS's network as early as May 21, 2018, and acquired files containing patient information, including names, addresses, dates of birth, and medical record numbers. SHDS detected abnormal activity on June 22, 2018. This supplemental notice was sent to individuals potentially missed in the initial notification on February 15, 2019.

California clockDiscovered Jun 22, 2018 → Notified May 30, 2019342d ✗ CA 60-day late49 weeks discovery → filing

Incident timeline

undetected · 32 days
discovery → filing · 49 weeks / 342 days

May 21, 2018

Begins

Jun 22, 2018

Discovered

May 30, 2019

Filed

vs. sector median

+39 wks slower

Part of Sharecare Health Data Services, LLC supply-chain incident (2019) — a supply-chain cascade affecting multiple organizations.View cascade →
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.