PhysicalTheftCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
Santa Cruz Biotechnology, Inc.
bd_1230217910e533d7 · schema v1 · pii pii-v1
Full breach record for Santa Cruz Biotechnology, Inc. →Santa Cruz Biotechnology, Inc. reported a physical burglary at its Santa Cruz office on December 17, 2017, resulting in the theft of two HR computers. Records containing employee PII (names, SSNs, DOB, health info) were stored locally. No evidence suggests unauthorized access, but the company offered one year of identity protection services and enhanced encryption controls.
California clockDiscovered Dec 18, 2017 → Notified Feb 22, 201866d ✗ CA 60-day late9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_b1ae7a75e8e1e802Montana State AGfiled 2018-02-22Candidate
- bd_49e04d671ab27e50California State AGfiled 2018-03-30(36d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-134011
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 22, 2018
- Raw hash
- 8678d32350b98121cd947f29ff458e400bb41006903e97fbdda51c61e80d6b1e
Reporting entity
- Name
- Santa Cruz Biotechnology, Inc.norm: santa cruz biotechnology
Victim entity
- Name
- Santa Cruz Biotechnology, Inc.norm: santa cruz biotechnology
Incident
- Discovered
- Dec 18, 2017
- Materiality determined
- —
- Notification sent
- Feb 22, 2018
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 9 weeks(66 days from discovery to filing)
- Compliance flags
- CA 60-day late · 66d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 18, 2017→ Notified: Feb 22, 201866d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.