HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPHIHEALTH_BASICIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Welcome Health
bd_20cb0154021edefe · schema v1 · pii pii-v1
Full breach record for Welcome Health →Welcome Health disclosed unauthorized access to a user's email account due to compromised credentials. The incident occurred between June 11, 2024, and July 8, 2024, and was discovered on July 8, 2024. Protected health information (PHI) of patients and personal information (PI), including SSNs, of contractors were potentially accessed. Welcome Health engaged forensic experts, terminated access, and is offering two years of credit monitoring.
California clockDiscovered Jul 8, 2024 → Notified Sep 6, 202460d ✓ CA 60-day OK9 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_1176fe156962026eHHS OCRfiled 2024-09-06Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-591348
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 6, 2024
- Raw hash
- cf28cd0e07a6984acd9097f0f8474bca1cd378f53002c238adab6d2dcdb5fb09
Reporting entity
- Name
- Welcome Healthnorm: welcome health
Victim entity
- Name
- Welcome Healthnorm: welcome health
Incident
- Discovered
- Jul 8, 2024
- Materiality determined
- —
- Notification sent
- Sep 6, 2024
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 60d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 8, 2024→ Notified: Sep 6, 202460d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.