PhysicalHealthcareHealthcareTheftCustomer Data InvolvedPHIHealth (basic)Identity (basic)LowContained

SynerMed Inc

bd_158945578c9a632d · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 15, 2013

Filed

Jun 6, 2013

To disclose

7 weeks

Affected

Not disclosed

Confidence

66%

Full breach record for SynerMed Inc →

SynerMed Inc reported the theft of an employee's laptop containing protected health information (PHI) of Inland Valleys IPA members. The incident occurred on April 14-15, 2013, when a thief broke into an employee's vehicle and stole the laptop. The device was password-protected, and network access was immediately disabled. Affected data included member names, membership numbers, addresses, CPT codes, diagnosis codes, and dates of birth. No social security numbers or financial information were involved.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 7 weeks / 52 days

Apr 14, 2013

Begins

Apr 15, 2013

Discovered

Jun 6, 2013

Filed

vs. sector median

4 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: SynerMed Inc
norm: synermed

Name: SynerMed Inc
norm: synermed
Industry: Healthcarellm

Discovered: Apr 15, 2013
Breach occurred: Apr 14, 2013 – Apr 15, 2013
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PHIHealth (basic)Identity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External

During the incident: Immediately contacted local police
Immediately contacted SynerMed
Eliminated ability to connect to SynerMed systems immediately in the early morning, April 15
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(52 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-41928
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 6, 2013
Raw hash: e68f0a3bde3c8c17fd9d07d94e61b744e47e5bdd8af4ec2508f306481aab34d7

Reporting entitySynerMed Inc

Victim entitySynerMed Inc

Incidentdiscovered Apr 15, 2013

Stated responseImmediately contacted local police

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov