AccidentalHealthcareFinancial ServicesHealthcareMisdeliveryCustomer Data InvolvedEmployee Data InvolvedGovernment IDIdentity (basic)PHIHealth (basic)MediumResolved

Laborers Funds Administrative Office of Northern California, Inc.

bd_1ab420f6a026facc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 17, 2016

Filed

Mar 15, 2016

To disclose

27 days

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for Laborers Funds Administrative Office of Northern California, Inc. →

Laborers Funds Administrative Office of Northern California, Inc. experienced a data breach on February 17, 2016, due to a computer error that resulted in the misdelivery of IRS Form 1095-B documents. The defective forms contained full names, Social Security numbers, and health plan coverage information for participants and their dependents, which were mailed to other Fund participants. The Fund notified affected individuals, the California Attorney General, and HHS, and provided one year of complimentary credit monitoring through AllClear ID.

J jump to incidentP pin to compareR raw source

California clockDiscovered Feb 17, 2016 → Notified Feb 26, 20169d ✓ CA 60-day OK27 days discovery → filing

Incident timeline

discovery → filing · 27 days

Feb 17, 2016

Begins

Feb 17, 2016

Discovered

Mar 15, 2016

Filed

vs. sector median

9 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_411fda9e3b80d34c2016-03-15Candidate

Name: Laborers Funds Administrative Office of Northern California, Inc.
norm: laborers funds administrative office of northern california
Domain: norcalaborers.org

Name: Laborers Funds Administrative Office of Northern California, Inc.
norm: laborers funds administrative office of northern california
Domain: norcalaborers.org
Industry: HealthcarellmFinancial Servicesllm

Discovered: Feb 17, 2016
Breach occurred: Feb 17, 2016
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 26, 2016
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)PHIHealth (basic)
Data elements: Social Security number
Attack vector: Unknown
Regulator citations: Notified the California State Attorney GeneralNotified the United States Department of Health and Human Services

During the incident: Identified the group of participants and dependents affected by the breach
Sent Notice of Data Breach to affected individuals
Notified the media
Notified the California State Attorney General
Notified the United States Department of Health and Human Services
Conducted training of its customer service agents to address concerns
Working closely with its technology staff to ensure that no data breach happens in the future
Paid for credit monitoring for all affected participants and dependents for one year
Retained AllClear ID to provide one year of credit monitoring services free of charge
Changes made: Conducted training of its customer service agents
Working closely with its technology staff to ensure that no data breach happens in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 days(27 days from discovery to filing)
Compliance flags: CA 60-day OK · 9d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Feb 17, 2016
→ Notified: Feb 26, 2016
9d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Feb 17, 2016 → Notified: Feb 26, 2016	9d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

HHS OCRMar 15 · first

California State AGMar 15 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-60488
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 15, 2016
Raw hash: d7e216eeb51e7515d6d41e34788bba161649e34e6ae55963a8181e85120803b0

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityLaborers Funds Administrative Office of Northern California, Inc.

Victim entityLaborers Funds Administrative Office of Northern California, Inc.

Incidentdiscovered Feb 17, 2016

Stated responseIdentified the group of participants and dependents affected by the breach

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov