HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedPHIIDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASICMediumContained
Healthpointe Medical Group, Inc.
bd_12068fa0aa8cf939 · schema v1 · pii pii-v1
Full breach record for Healthpointe Medical Group, Inc. →Healthpointe Medical Group, Inc. disclosed a data breach where an unauthorized actor gained access to systems on June 9, 2021, and exfiltrated files containing patient PII, PHI, and SSNs. The company engaged forensic specialists, secured servers, reset passwords, and implemented MFA and firewall updates. Credit monitoring was offered to affected individuals.
California clockDiscovered Jun 9, 2021 → Notified Aug 30, 202182d ✗ CA 60-day late12 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_a0cef5f9224b7d45Maine State AGfiled 2021-08-30Verified
- bd_adb19da6bbd9f744HHS OCRfiled 2021-08-30Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-544422
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 30, 2021
- Raw hash
- e91db71182885df940845a7948af1c7d02405f7b44150f885149bed5ab4122f8
Reporting entity
- Name
- Healthpointe Medical Group, Inc.norm: healthpointe medical
- Domain
- healthpointe.net
Victim entity
- Name
- Healthpointe Medical Group, Inc.norm: healthpointe medical
- Domain
- healthpointe.net
Incident
- Discovered
- Jun 9, 2021
- Materiality determined
- —
- Notification sent
- Aug 30, 2021
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Providing notice to the U.S. Department of Health and Human ServicesProviding notice to required state regulators
Compliance
- Time to disclose
- 12 weeks(82 days from discovery to filing)
- Compliance flags
- CA 60-day late · 82d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 9, 2021→ Notified: Aug 30, 202182d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.