DisclosureLens
HackingHealthcareHealthcareBusiness Associate (HIPAA)Customer Data InvolvedDownstream VictimsHigh

the group health plans of Stanford Health Care, of Stanford Health Care, Lucile Packard Children's Hospital Stanford, Stanford Health Care Tri-Valley, Stanford Medicine Partners, and Packard Children's Health Alliance

bd_2f0ba9196cb9de3b · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Nov 18, 2023

To disclose

—

Affected · nationwide

1,648,8488 in this filing

Confidence

50%
Full breach record for the group health plans of Stanford Health Care, of Stanford Health Care, Lucile Packard Children's Hospital Stanford, Stanford Health Care Tri-Valley, Stanford Medicine Partners, and Packard Children's Health Alliance →

Welltok, Inc., a business associate for Stanford Health Care and its affiliated health plans, reported a data breach affecting 8 Maine residents. The incident was an external system breach that occurred on May 30, 2023. Affected individuals were notified on October 17, 2023, and offered credit monitoring and identity restoration services through Experian.

Incident timeline

May 30, 2023

Begins

Nov 18, 2023

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,648,848 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.