MisuseHealthcareHealthcareData MishandlingCustomer Data InvolvedEmployee Data InvolvedPHIIdentity (basic)Government IDHealth (basic)MinorMediumContained

CalOptima

bd_3cb594a1301d2dfa · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Oct 14, 2016

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for CalOptima →3 incidents on file

On August 17, 2016, a departing CalOptima employee downloaded protected health information, including names, demographic data, and social security numbers for some members (including minors), to an unencrypted USB flash drive. The drive was returned to CalOptima. The organization is investigating the contents and does not believe the information was shared. CalOptima is offering credit/identity monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 17, 2016

Begins

Oct 14, 2016

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: CalOptima
norm: caloptima
Domain: caloptima.org

Name: CalOptima
norm: caloptima
Domain: caloptima.org
Industry: Healthcarellm

Discovered: —
Breach occurred: Aug 17, 2016
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PHIIdentity (basic)Government IDHealth (basic)Minor
Data elements: Social Security number
Attack vector: Insider
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: Internal
Initial access: insider_action

During the incident: Investigating the contents of the flash drive
Offering identity monitoring services to impacted children at no cost for 12 months
Offering credit monitoring services to impacted adults at no cost for 12 months
Changes made: Changing procedures and practices to minimize the risk of it happening again
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-64419
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 14, 2016
Raw hash: 081831958df5e248bcfb50af15f1c6d7b8646debced8ab3b84cb961340b1873f

Reporting entityCalOptima

Victim entityCalOptima

IncidentInsider

Stated responseInvestigating the contents of the flash drive

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov