Social EngineeringPhishingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive
Focus Home Health
bd_19effa486e2904c0 · schema v1 · pii pii-v1
Full breach record for Focus Home Health →Covenant Care California, LLC, on behalf of Rehabfocus Home Health, Inc., reported a data breach involving unauthorized access to a Microsoft 365 email account via a phishing email between February 24 and March 4, 2022. The incident compromised patient records containing names, Social Security numbers, dates of birth, and driver's license numbers. The company secured the account, engaged forensic investigators, notified law enforcement, and offered one year of Kroll Identity Monitoring services to affected individuals.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-553503
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 17, 2022
- Raw hash
- c5fd8cad970635ad8f2e7bd89a0109f211cb1acaa9d5d47e9eb0b7aaf3e8ae7f
Reporting entity
- Name
- Covenant Care California, LLCnorm: covenant care california
Victim entity
- Name
- Focus Home Healthnorm: focus home health
- Domain
- focushomehealth.com
Incident
- Discovered
- Mar 4, 2022
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Regulator citations
- Reporting the incident to appropriate state and federal regulators
- Initial access
- phishing_link
Compliance
- Time to disclose
- 11 weeks(74 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.