HackingData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
Octapharma Plasma, Inc.
bd_10c15797aebfb891 · schema v1 · pii pii-v1
Full breach record for Octapharma Plasma, Inc. →On April 17, 2024, Octapharma Plasma, Inc. detected suspicious activity on its IT systems. An unauthorized party accessed file share systems and acquired personal information. The incident has been contained and the investigation concluded. Affected individuals were offered 24 months of credit monitoring.
California clockDiscovered Apr 17, 2024 → Notified Aug 30, 2024135d ✗ CA 60-day late22 weeks discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (2)
- bd_6f2eac9d3a3a9237Leak Siteblacksuitfiled 2024-04-23(148d gap)Verified
- bd_580edc4845b6f56cLeak Siteblacksuitfiled 2024-04-15(157d gap)Verified by operator
Regulatory filings (2) · sorted by filing gap
- bd_eddf2253a2b1ce3eOregon State AGfiled 2024-09-15(4d gap)Verified
- bd_9e19a3be7beab16fWashington State AGfiled 2024-08-30(20d gap)Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-592123
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 19, 2024
- Raw hash
- aefa5be45bb33c3875677b8117e065a6c2ef88b3e5fc158744bfc9f42f655d50
Reporting entity
- Name
- Octapharma Plasma, Inc.norm: octapharma plasma
- Domain
- octapharmaplasma.com
Victim entity
- Name
- Octapharma Plasma, Inc.norm: octapharma plasma
- Domain
- octapharmaplasma.com
Incident
- Discovered
- Apr 17, 2024
- Materiality determined
- —
- Notification sent
- Aug 30, 2024
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified the FBI
Compliance
- Time to disclose
- 22 weeks(155 days from discovery to filing)
- Compliance flags
- CA 60-day late · 135dLeak >90d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 17, 2024→ Notified: Aug 30, 2024135d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.