CALIFORNIAHackingHealthcareHealthcarePHIHealth (basic)Identity (basic)HighContained

North Los Angeles County Regional Center

bd_2e4c0a074ea2976c · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Jan 6, 2025

To disclose

—

Affected

298,629

Linked

10 records

Confidence

68%

Full breach record for North Los Angeles County Regional Center →3 incidents on file

North Los Angeles County Regional Center reported to HHS on 2025-01-06 a Hacking/IT Incident affecting 298629 individuals. Breached information located on Network Server. Business Associate present.

J jump to incidentP pin to compareR raw source

HIPAA clock✓ HHS notified

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

⚠ No discovery dateThe OCR public portal omits the discovery date, so the 60-day notification clock cannot be evaluated from this source — only that the filing was submitted.

Incident timeline — partial

? — ?

Breach window unknown

Jan 6, 2025

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 10 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemedusabd_46c8a44e39875c252024-12-12 · +24dVerified by operator

Regulatory filings (8) · sorted by filing gap

California State AGbd_0adb4f23e6eb51032025-01-06Verified by operator
Illinois State AGbd_8e213e6f632d076e2026-06-01 · +511dVerified by operator
California State AGbd_021a4cab1cfa4d5f2026-06-30 · +540dCandidate
Nebraska State AGbd_0e7c86cf47f8110b2026-06-30 · +540dVerified by operator

Show 4 more filings ↓up to 546d gap

Massachusetts State AGbd_8c36eabdbb03e7782026-06-30 · +540dVerified
Vermont State AGbd_abad50be558f6b622026-06-30 · +540dVerified by operator
Indiana State AGbd_ac2666b7c9330dca2026-06-30 · +540dVerified
New Hampshire State AGbd_147635ef84b2335f2026-07-06 · +546dVerified by operator

Name: North Los Angeles County Regional Center
norm: north los angeles county regional center
Domain: nlacrc.org
Industry: Health Care Services

Name: North Los Angeles County Regional Center
norm: north los angeles county regional center
Domain: nlacrc.org
Industry: Healthcaresource default

Discovered: Not extracted — the OCR public portal omits it
Materiality determined: —
Notification sent: —
Affected individuals: 298,629nationwide
Data types: PHIHealth (basic)Identity (basic)
HHS breach type: Hacking / IT incident
Where the data lived: Network server
Covered-entity type: Business associate
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified HHS
Third party: via North Los Angeles County Regional Centerbusiness associate

Compliance flags: HHS notified
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: not extracted
→ Notified: not extracted
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: not extracted → Notified: not extracted	—	regulatory submission	HHS notified

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 7 states

View merged incident ↗

California State AGJan 6 · first

HHS OCRJan 6 · first · this page

Illinois State AG+511d

California State AG+540d

Nebraska State AG+540d

Massachusetts State AG+540d

Vermont State AG+540d

Indiana State AG+540d

New Hampshire State AG+546d

Pattern: first filing Jan 6 (CA), last Jul 6 (NH) — a 546-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Jan 6, 2025
Raw hash: 7a2654ed7483bf9e88502b778fea85ebecf10281c5248596f6f3f70b980eba79

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html999 B

Download View at source

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entityNorth Los Angeles County Regional Center

Victim entityNorth Los Angeles County Regional Center

IncidentUnauthorized Access

ComplianceHHS notified

Extraction provenanceno artifact recorded

Source provenanceocrportal.hhs.gov

Source filing