HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowContained
Turning Point of Central California, Inc.
bd_40a287b7b07c2acb · schema v1 · pii pii-v1
Full breach record for Turning Point of Central California, Inc. →Turning Point of Central California, Inc. (TPOCC) reported a data security incident where an unauthorized user gained access to its systems in May 2024. The breach date is listed as April 30, 2024. The investigation found that some documents containing Protected Health Information (PHI) may have been copied. TPOCC disconnected systems, engaged forensic experts, reset passwords, and deployed endpoint monitoring. Affected individuals are being offered identity theft protection.
California clockDiscovered May 1, 2024 → Notified Feb 20, 2025295d ✗ CA 60-day late42 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-598932
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 20, 2025
- Raw hash
- 923731299c97b93b6360f927e72d9d0412b4722d560bb5826028df4eec7accbf
Reporting entity
- Name
- Turning Point of Central California, Inc.norm: turning point of central california
- Domain
- tpocc.org
Victim entity
- Name
- Turning Point of Central California, Inc.norm: turning point of central california
- Domain
- tpocc.org
Incident
- Discovered
- May 1, 2024
- Materiality determined
- —
- Notification sent
- Feb 20, 2025
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 42 weeks(295 days from discovery to filing)
- Compliance flags
- CA 60-day late · 295d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 1, 2024→ Notified: Feb 20, 2025295d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.