AccidentalMisdeliveryCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowResolved
Palomar Health
bd_20d4af1178f107d5 · schema v1 · pii pii-v1
Full breach record for Palomar Health →On September 27, 2017, an employee of Palomar Health unintentionally misdirected an email containing patient-related information to an unintended recipient. The information included patient names, hospital-assigned ID numbers, admission/discharge dates, site of care, and primary payer/health plan names. It did not include SSNs, payment info, or medical records. The recipient deleted the email. Palomar Health notified the California Department of Public Health.
California clockDiscovered Sep 27, 2017 → Notified Oct 20, 201723d ✓ CA 60-day OK23 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-102889
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 20, 2017
- Raw hash
- 7bbdbca17bfa1fe91a12e13a93a403f7a80d55846742fb24c98b25de8363720a
Reporting entity
- Name
- Palomar Healthnorm: palomar health
- Domain
- palomarhealth.org
Victim entity
- Name
- Palomar Healthnorm: palomar health
- Domain
- palomarhealth.org
Incident
- Discovered
- Sep 27, 2017
- Materiality determined
- —
- Notification sent
- Oct 20, 2017
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unknown
- Threat actor
- Internal
- Regulator citations
- Notified the California Department of Public Health
Compliance
- Time to disclose
- 23 days(23 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 23d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 27, 2017→ Notified: Oct 20, 201723d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.