Social EngineeringPhishingCustomer Data InvolvedEmployee Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowContained
CITY OF HOPE
bd_35bf1c6f9843005a · schema v1 · pii pii-v1
Full breach record for CITY OF HOPE →City of Hope notified California regulators and patients of a phishing incident in May 2017. The attack compromised four staff email accounts containing patient PHI (names, MRNs, DOB, clinical info). No SSN or financial data was involved. City of Hope secured accounts, engaged forensic investigators, and reported to law enforcement.
California clockDiscovered Jun 2, 2017 → Notified Jul 21, 201749d ✓ CA 60-day OK9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_78fd1b1f4034998dHHS OCRfiled 2017-08-03Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-100824
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 3, 2017
- Raw hash
- eed46ca56b42cf76bcd5d8af7fec6e4b60abe30c108b39cba898bfb5ac11af27
Reporting entity
- Name
- CITY OF HOPEnorm: city of hope
- Domain
- cityofhope.org
Victim entity
- Name
- CITY OF HOPEnorm: city of hope
- Domain
- cityofhope.org
Incident
- Discovered
- Jun 2, 2017
- Materiality determined
- —
- Notification sent
- Jul 21, 2017
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- ExternalFinancial
- Regulator citations
- Submitted Breach Notification to California Office of the Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 9 weeks(62 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 49d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 2, 2017→ Notified: Jul 21, 201749d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.