PhysicalHealthcareHealthcareTheftCustomer Data InvolvedPHIIdentity (basic)Health (basic)Government IDMediumContained

North East Medical Services Foundation

bd_1007048df3674b84 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 13, 2015

Filed

Jul 31, 2015

To disclose

18 days

Affected

Not disclosed

Linked

2 filings

Confidence

64%

Full breach record for North East Medical Services Foundation →2 incidents on file

North East Medical Services reported the theft of an employee's work laptop from a vehicle on July 11, 2015. The laptop contained unencrypted spreadsheets with protected health information (PHI), including names, dates of birth, contact info, and limited health data. For some patients, insurance account numbers contained Social Security numbers. No actual medical records were involved. The company notified affected individuals on July 30, 2015, and offered 12 months of identity protection.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jul 13, 2015 → Notified Jul 30, 201517d ✓ CA 60-day OK18 days discovery → filing

Incident timeline

undetected · 2 days

discovery → filing · 18 days

Jul 11, 2015

Begins

Jul 13, 2015

Discovered

Jul 31, 2015

Filed

vs. sector median

10 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_93f41be68fc4f7b02015-07-31Verified

Name: North East Medical Services Foundation
norm: north east medical

Name: North East Medical Services Foundation
norm: north east medical
Industry: Healthcarellm

Discovered: Jul 13, 2015
Breach occurred: Jul 11, 2015
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 30, 2015
Affected individuals: Not disclosed
Data types: PHIIdentity (basic)Health (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External

During the incident: Immediately began an investigation
Reported the incident to the police
Arranged to have AllClear ID protect your identity for 12 months at no cost
Changes made: Reviewing policies and updating them as warranted
Re-training staff on data privacy policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: CA 60-day OK · 17d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jul 13, 2015
→ Notified: Jul 30, 2015
17d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jul 13, 2015 → Notified: Jul 30, 2015	17d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

HHS OCRJul 31 · first

California State AGJul 31 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-57240
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 31, 2015
Raw hash: a624bbc53665caa50b65297aeca91fb6f27765828e8843d6f4e16dfb061b688d

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityNorth East Medical Services Foundation

Victim entityNorth East Medical Services Foundation

Incidentdiscovered Jul 13, 2015

Stated responseImmediately began an investigation

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov