HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
Sonoma Recovery Services, LLC
bd_18042ada54c215b5 · schema v1 · pii pii-v1
Full breach record for Sonoma Recovery Services, LLC →Sonoma Recovery Services d/b/a Olympia House experienced unauthorized access to its network between July 1, 2020, and August 7, 2020. The breach impacted patient records containing names, addresses, SSNs, financial data, and medical history. The company engaged forensic experts, secured systems, notified HHS, and offered 12 months of credit monitoring to affected individuals.
California clockDiscovered Aug 7, 2020 → Notified Sep 29, 202053d ✓ CA 60-day OK19 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_e5bb419ecf42b83eMontana State AGfiled 2020-12-15Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-197196
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 15, 2020
- Raw hash
- 899343a57f6591de45fb0e76ec75b91f16c39d284f9542c7e600107be7e6ef43
Reporting entity
- Name
- Sonoma Recovery Services, LLCnorm: sonoma recovery
Victim entity
- Name
- Sonoma Recovery Services, LLCnorm: sonoma recovery
Incident
- Discovered
- Aug 7, 2020
- Materiality determined
- —
- Notification sent
- Sep 29, 2020
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- notifying the required regulators of the event including the U.S. Department of Health and Human Services
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 19 weeks(130 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 53d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Aug 7, 2020→ Notified: Sep 29, 202053d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.