Eisner Health
bd_433c5fc9771c6681 · schema v1 · pii pii-v1
Full breach record for Eisner Health →Nonstop Administration and Insurance Services, Inc., a business associate of Eisner Health, notified the California Attorney General of an unauthorized access incident. On December 22, 2022, an unknown party accessed a cloud services platform maintained by Nonstop. The investigation determined that the access was unauthorized and occurred for a limited time. The data involved included names and other health-related information. Nonstop engaged forensic specialists, reported the incident to law enforcement, and implemented a redesigned cloud-services workflow. Affected individuals were offered credit monitoring and identity protection services.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-567262
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 26, 2023
- Raw hash
- f661fec816d4a110269894aa197484b0d7d0bcbf170b482a9662d10e2dccd549
Reporting entity
- Name
- Nonstop Administration and Insurance Servicesnorm: nonstop administration and insurance
Victim entity
- Name
- Eisner Healthnorm: eisner health
- Domain
- eisnerhealth.org
Incident
- Discovered
- Dec 22, 2022
- Materiality determined
- —
- Notification sent
- Feb 15, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPHIHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Reported this incident to law enforcement
- Third party
- via Nonstop Administration and Insurance Services, Inc.
Compliance
- Time to disclose
- 22 weeks(155 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 55d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 22, 2022→ Notified: Feb 15, 202355d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.