CCM Health
bd_27ad049c600e5e1c · schema v1 · pii pii-v1
Full breach record for CCM Health →2 incidents on fileCCM Health notified California residents of a network security incident where unauthorized access occurred between April 3 and April 10, 2023. The attacker may have accessed and removed files containing personal information (name, date of birth) and protected health information (medical records, diagnoses, treatments). CCM Health contained the threat, engaged forensic investigators, and alerted law enforcement. No specific malware or threat actor was named.
J jump to incidentP pin to compareR raw source
Incident timeline
Apr 3, 2023
Begins
Apr 10, 2023
Discovered
Apr 5, 2024
Filed
vs. sector median
+42 wks slower
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- Massachusetts State AGbd_bd7b6becffb29f592024-03-15 · +21dVerified
- Maine State AGbd_f1a609c3ddaed8a32024-03-13 · +23dVerified
- Washington State AGbd_1f76fbcbf7e394d92024-03-12 · +24dVerified
- Indiana State AGbd_2fe1f2e2bb19b0b62024-03-12 · +24dVerified
Show 4 more filings ↓Show fewer ↑up to 35d gap
- California State AGbd_9cd9daff80fca1562024-03-12 · +24dVerified
- HHS OCRbd_c67b7a97167e034d2024-03-12 · +24dVerified
- Montana State AGbd_f35303503d1c70e32024-03-12 · +24dVerified
- Illinois State AGbd_4b3bf823a2f121fa2024-03-01 · +35dCandidate
Filing propagation · 9 filings · 8 states
View merged incident ↗Pattern: first filing Mar 1 (IL), last Apr 5 (CA) — a 35-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.