Buddhist Tzu Chi Medical Foundation
bd_365727d41ae38a18 · schema v1 · pii pii-v1
Full breach record for Buddhist Tzu Chi Medical Foundation →Buddhist Tzu Chi Medical Foundation discovered on July 15, 2021, that several computers were operating unusually and portions of its network were inaccessible. The organization took affected servers offline and initiated an investigation. It appears that encrypted servers may have contained protected health information (PHI), including names, dates of birth, diagnosis information, and dental x-rays. The investigation could not determine if the information was accessed or removed. The organization upgraded workstation security software and is migrating to a cloud-based dental x-ray platform.
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_81b637470d4bde87Montana State AGfiled 2021-09-13(4d gap)Candidate
- bd_d7fff08dd0cf4675HHS OCRfiled 2021-09-13(4d gap)Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-545160
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 9, 2021
- Raw hash
- 317d1788b238012a1e001398129b1f2b343c6e4041f306a8eb90568c389c1f1c
Reporting entity
- Name
- Buddhist Tzu Chi Medical Foundationnorm: buddhist tzu chi medical
Victim entity
- Name
- Buddhist Tzu Chi Medical Foundationnorm: buddhist tzu chi medical
Incident
- Discovered
- Jul 15, 2021
- Materiality determined
- —
- Notification sent
- Sep 13, 2021
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unknown
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 60d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 15, 2021→ Notified: Sep 13, 202160d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.