HackingCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowContained
Indian Health Council Inc.
bd_30eaf0eab626a1e4 · schema v1 · pii pii-v1
Full breach record for Indian Health Council Inc. →Indian Health Council Inc. experienced a data security incident on September 22, 2020, where an unauthorized actor gained access to servers containing protected health information (PHI), including names, dates of birth, health information, and health insurance information. The organization engaged forensic investigators, implemented multi-factor authentication, and changed passwords. Affected residents of California, Kentucky, Maryland, New Mexico, New York, North Carolina, Oregon, and Rhode Island were notified.
California clockDiscovered Sep 22, 2020 → Notified Nov 20, 202059d ✓ CA 60-day OK8 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_5719ffcd3e101da5Montana State AGfiled 2020-11-20Candidate
- bd_61a336a328adc871HHS OCRfiled 2020-11-20Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-196391
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 20, 2020
- Raw hash
- 3bebdce3852b0e6b05ad5a6a2f227f4e06f967e8c9c865eb6c3b21d1737a888a
Reporting entity
- Name
- Indian Health Council Inc.norm: indian health council
Victim entity
- Name
- Indian Health Council Inc.norm: indian health council
Incident
- Discovered
- Sep 22, 2020
- Materiality determined
- —
- Notification sent
- Nov 20, 2020
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 59d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 22, 2020→ Notified: Nov 20, 202059d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.