HackingStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICPHIHEALTH_BASICLowContained
AltaMed Health Services Corporation
bd_1682a4db2ffe3064 · schema v1 · pii pii-v1
Full breach record for AltaMed Health Services Corporation →AltaMed Health Services Corporation notified the California Attorney General of an incident where an unauthorized individual accessed an email account between August 5 and August 9, 2024. AltaMed became aware of suspicious activity on August 9, 2024, and contained the incident by disconnecting systems. The investigation, finalized on April 16, 2025, determined that names and potentially protected health information were involved. No evidence of fraudulent use was found. AltaMed enhanced security protocols and offered 24 months of credit monitoring to affected individuals.
California clockDiscovered Aug 9, 2024 → Notified Jun 13, 2025308d ✗ CA 60-day late44 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_39a34b1fb2ca9975HHS OCRfiled 2025-06-13Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-604053
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 13, 2025
- Raw hash
- ee7f5f93cc1c94d337ea93d950f6bbe4e637528187d86287f30fbb2b770bd1fa
Reporting entity
- Name
- AltaMed Health Services Corporationnorm: altamed health
Victim entity
- Name
- AltaMed Health Services Corporationnorm: altamed health
Incident
- Discovered
- Aug 9, 2024
- Materiality determined
- —
- Notification sent
- Jun 13, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPHIHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 44 weeks(308 days from discovery to filing)
- Compliance flags
- CA 60-day late · 308d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Aug 9, 2024→ Notified: Jun 13, 2025308d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.