HackingHealthcareHealthcareCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Southland Integrated Services, Inc.

bd_3dc8022254704d45 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 18, 2023

Filed

Nov 10, 2023

To disclose

23 days

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for Southland Integrated Services, Inc. →

Southland Integrated Services, Inc. experienced unauthorized access to its computer network between October 16 and October 18, 2023. The incident was discovered on October 18, 2023. Affected data may include names, addresses, dates of birth, vaccination status, Social Security numbers, driver's license numbers, and financial account information. The company engaged a third-party forensic firm, contained the incident, and is offering identity theft protection services.

J jump to incidentP pin to compareR raw source

California clockDiscovered Oct 18, 2023 → Notified Nov 10, 202323d ✓ CA 60-day OK23 days discovery → filing

Incident timeline

undetected · 2 days

discovery → filing · 23 days

Oct 16, 2023

Begins

Oct 18, 2023

Discovered

Nov 10, 2023

Filed

vs. sector median

6 wks faster

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_b9009f65b4a6546a2023-11-10Verified

Name: Southland Integrated Services, Inc.
norm: southland integrated

Name: Southland Integrated Services, Inc.
norm: southland integrated
Industry: Healthcarellm

Discovered: Oct 18, 2023
Breach occurred: Oct 16, 2023 – Oct 18, 2023
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 10, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Took steps to secure our systems
Contained the incident
Began an investigation with the assistance of a third-party forensic firm
Offering identity theft protection services through IDX
Changes made: Implemented additional safeguards to further protect and monitor our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 days(23 days from discovery to filing)
Compliance flags: CA 60-day OK · 23d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Oct 18, 2023
→ Notified: Nov 10, 2023
23d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Oct 18, 2023 → Notified: Nov 10, 2023	23d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

HHS OCRNov 10 · first

California State AGNov 10 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-576404
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 10, 2023
Raw hash: 2de4b329429f59728f32e93ec9f918b1c07e15e66f7cb48bf91e626c22b775fa

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entitySouthland Integrated Services, Inc.

Victim entitySouthland Integrated Services, Inc.

Incidentdiscovered Oct 18, 2023

Stated responseTook steps to secure our systems

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov