AccidentalHealthcareFinancial ServicesHealthcareMisconfigurationCustomer Data InvolvedIdentity (basic)PHILowResolved

L.A. Care Health Plan

bd_1fd5b91e3456327e · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 24, 2014

Filed

Feb 27, 2014

To disclose

5 weeks

Affected

Not disclosed

Confidence

65%

Full breach record for L.A. Care Health Plan →6 incidents on file

L.A. Care Health Plan experienced a manual information processing error between January 22 and January 24, 2014, resulting in the accidental disclosure of member names, addresses, and member identification numbers via the payment portal. The portal was temporarily disabled, the error corrected, and replacement IDs issued. No SSNs or financial data were exposed.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 5 weeks / 34 days

Jan 22, 2014

Begins

Jan 24, 2014

Discovered

Feb 27, 2014

Filed

vs. sector median

8 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: L.A. Care Health Plan
norm: la care health plan
Domain: lacare.org

Name: L.A. Care Health Plan
norm: la care health plan
Domain: lacare.org
Industry: HealthcarellmFinancial Servicesllm

Discovered: Jan 24, 2014
Breach occurred: Jan 22, 2014 – Jan 24, 2014
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)PHI
Attack vector: Unknown

During the incident: Temporarily disabled the payment portal
Began to investigate the issue
Corrected the manual information processing error
Sending a new member identification number and new card with the replacement identification number
Changes made: Reviewing and revising procedures and practices to minimize the risk of this happening again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(34 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-44232
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 27, 2014
Raw hash: 7e3d5a4f55fe9206db0b5b7e54636493868eeff4e462e6aa801558aa6bea5a64

Reporting entityL.A. Care Health Plan

Victim entityL.A. Care Health Plan

Incidentdiscovered Jan 24, 2014

Stated responseTemporarily disabled the payment portal

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov