HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASICMediumContained
Bi-Bett Corporation
bd_1810ca3e6070f679 · schema v1 · pii pii-v1
Full breach record for Bi-Bett Corporation →Bi-Bett Corporation detected unusual activity in a single email account on February 17, 2023. The account was compromised by an unauthorized actor, potentially exposing personal and protected health information including names, addresses, Social Security Numbers, driver's license numbers, Medicaid numbers, and medical reference numbers. The company secured the account, engaged a third-party cybersecurity firm, changed credentials, and enhanced security measures. Affected individuals are offered 12 months of credit monitoring and fraud assistance.
California clockDiscovered Feb 17, 2023 → Notified Jul 25, 2023158d ✗ CA 60-day late23 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_0507b9d44f701bccHHS OCRfiled 2023-07-25Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-570824
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 25, 2023
- Raw hash
- ad794003ffcff11f54cacbf803a2b27691ecea5861eb3b09d59f68801d9d0608
Reporting entity
- Name
- Bi-Bett Corporationnorm: bi bett
Victim entity
- Name
- Bi-Bett Corporationnorm: bi bett
Incident
- Discovered
- Feb 17, 2023
- Materiality determined
- —
- Notification sent
- Jul 25, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1114 Email Collection
- Threat actor
- External
Compliance
- Time to disclose
- 23 weeks(158 days from discovery to filing)
- Compliance flags
- CA 60-day late · 158d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 17, 2023→ Notified: Jul 25, 2023158d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.