HackingCustomer Data InvolvedDelayed DiscoveryPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
Michael R. Schwartz, MD Inc.
bd_3910055b79c201d8 · schema v1 · pii pii-v1
Full breach record for Michael R. Schwartz, MD Inc. →Michael R. Schwartz, M.D., Inc. experienced unauthorized remote access to an office computer containing patient personal and health information. The intrusion occurred between January 20, 2025, and August 26, 2025, and was discovered on August 25, 2025. Affected data included names, Social Security numbers, addresses, emails, phone numbers, photographs, and medical record numbers. The organization secured systems, engaged cybersecurity experts, replaced hardware, and offered 12 months of identity monitoring.
California clockDiscovered Aug 25, 2025 → Notified Oct 23, 202559d ✓ CA 60-day OK8 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_0d83532c30e435aeHHS OCRfiled 2025-10-23Verified
- bd_4b3171daeb8f6b3cHHS OCRfiled 2025-10-23Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-613288
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 23, 2025
- Raw hash
- 681cc20ab1db8971a49125cbc6256ad6161640826b7b160ac4b14399429ea986
Reporting entity
- Name
- Dr. Jaime Schwartz MD, FACSnorm: dr jaime schwartz md facs
- Domain
- drjaimeschwartz.com
Victim entity
- Name
- Michael R. Schwartz, MD Inc.norm: michael r schwartz md
Incident
- Discovered
- Aug 25, 2025
- Materiality determined
- —
- Notification sent
- Oct 23, 2025
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified the Office of Civil Rights of the Department of Health and Human ServicesNotified the Attorneys General of California, New Jersey, New York, North Carolina and VermontNotified the New York Department of State and the New York State Police
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 59d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Aug 25, 2025→ Notified: Oct 23, 202559d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.