Social EngineeringPhishingCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowContained
Bridges Hospice
bd_29461ab6fabb4127 · schema v1 · pii pii-v1
Full breach record for Bridges Hospice →Hospice by the Bay notified the California Attorney General of a data breach occurring on March 10, 2020. An unauthorized individual sent a phishing email impersonating an employee to obtain an electronic report containing personal health information, including names, medical record numbers, insurer names, and service charges. Social Security numbers were not impacted. The organization strengthened employee training and internal policies in response.
California clockDiscovered Mar 10, 2020 → Notified Mar 27, 202017d ✓ CA 60-day OK17 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-188680
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 27, 2020
- Raw hash
- 57c8f9dc6dde46643edc496ed1064e24e477f0d33d0c97b3d6b923062e8cde87
Reporting entity
- Name
- Bridges Hospicenorm: bridges hospice
- Domain
- bridgeshospice.org
Victim entity
- Name
- Bridges Hospicenorm: bridges hospice
- Domain
- bridgeshospice.org
Incident
- Discovered
- Mar 10, 2020
- Materiality determined
- —
- Notification sent
- Mar 27, 2020
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 17 days(17 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 17d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 10, 2020→ Notified: Mar 27, 202017d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.