HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedPHIIDENTITY_BASICHEALTH_BASICLowContained
Santa Clara Family Health Plan
bd_31752a57ba9ac955 · schema v1 · pii pii-v1
Full breach record for Santa Clara Family Health Plan →Santa Clara Family Health Plan notified members that a cyberattack on its vendor, Fortra, LLC, resulted in the theft of member data. The incident was discovered on January 30, 2023. Affected data includes names, contact info, dates of birth, member IDs, and Medi-Cal Client Index Numbers. SCFHP is offering 24 months of credit monitoring.
California clockDiscovered Jan 30, 2023 → Notified Feb 22, 202323d ✓ CA 60-day OK13 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-566223
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 2, 2023
- Raw hash
- 65fe826b56f7d4f61e021c18acb771b712eb85dc89ab63e0953b8d9c80623966
Reporting entity
- Name
- Santa Clara Family Health Plannorm: santa clara family health plan
- Domain
- www.scfhp.com
Victim entity
- Name
- Santa Clara Family Health Plannorm: santa clara family health plan
- Domain
- www.scfhp.com
Incident
- Discovered
- Jan 30, 2023
- Materiality determined
- —
- Notification sent
- Feb 22, 2023
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Third party
- via Fortra, LLC
- Initial access
- supply_chain
Compliance
- Time to disclose
- 13 weeks(92 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 23d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 30, 2023→ Notified: Feb 22, 202323d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.