HackingStolen CredentialsCustomer Data InvolvedPHIIDENTITY_BASICLowContained
Keck Medicine of USC
bd_12944ae92406fba3 · schema v1 · pii pii-v1
Full breach record for Keck Medicine of USC →On September 30, 2022, Keck Medicine of USC discovered unauthorized access to a provider's work email account. The incident involved potential exposure of protected health information and basic identity data. Keck secured the account, engaged forensic investigators, and is offering identity protection services to affected individuals. No financial account information or Social Security numbers were involved.
California clockDiscovered Sep 30, 2022 → Notified Dec 15, 202276d ✗ CA 60-day late11 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_bdd6a81b476ae06bMontana State AGfiled 2022-12-16Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-560177
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 16, 2022
- Raw hash
- e59b0fb6882d2a1915de81a87e0562ecc7a3d8f03f6ff8952453856bc0e6eebe
Reporting entity
- Name
- Keck Medicine of USCnorm: keck medicine of usc
- Domain
- keckmedicine.org
Victim entity
- Name
- Keck Medicine of USCnorm: keck medicine of usc
- Domain
- keckmedicine.org
Incident
- Discovered
- Sep 30, 2022
- Materiality determined
- —
- Notification sent
- Dec 15, 2022
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 11 weeks(77 days from discovery to filing)
- Compliance flags
- CA 60-day late · 76d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 30, 2022→ Notified: Dec 15, 202276d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.