HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
ZOLL Services LLC
bd_2f67424922ffdd52 · schema v1 · pii pii-v1
Full breach record for ZOLL Services LLC →ZOLL Services LLC reported a data security incident involving a third-party email archiving vendor. Between November 8 and December 28, 2018, a server migration exposed customer data including names, addresses, dates of birth, limited medical information, and Social Security numbers. ZOLL notified law enforcement, retained forensic investigators, and offered one year of free credit and identity monitoring to affected individuals. No indication of inappropriate use of information was found.
California clockDiscovered Jan 24, 2019 → Notified Jan 24, 20190d ✓ CA 60-day OK10 weeks discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-145987
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 4, 2019
- Raw hash
- fcc74e8b33a3a091cad464a8bcb2b39fdf933690464c78a866a503426fbb3ddd
Reporting entity
- Name
- ZOLL Services LLCnorm: zoll services
Victim entity
- Name
- ZOLL Services LLCnorm: zoll services
Incident
- Discovered
- Jan 24, 2019
- Materiality determined
- —
- Notification sent
- Jan 24, 2019
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified federal and state agencies
- Initial access
- supply_chain
Compliance
- Time to disclose
- 10 weeks(70 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 0d
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 24, 2019→ Notified: Jan 24, 20190d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.