HackingStolen CredentialsSupply Chain (3P Vendor)Business Associate (HIPAA)Customer Data InvolvedDelayed DiscoveryPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
Asian and Pacific Islander Wellness Center, Inc.
bd_4352756b00c6d70f · schema v1 · pii pii-v1
Full breach record for Asian and Pacific Islander Wellness Center, Inc. →San Francisco Community Health Center (SFCHC) notified patients of a data breach involving protected health information due to unauthorized access at TriZetto Provider Solutions, a subcontractor of SFCHC's business associate OCHIN. The incident, which began in November 2024 and was contained in October 2025, exposed names, addresses, dates of birth, Social Security numbers, and health insurance details. SFCHC was notified on December 12, 2025.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-616848
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 9, 2026
- Raw hash
- cb7283056ea16cb8fc0b0eeaeca7f03bec049975f3693153dc967c4ebca4d959
Reporting entity
- Name
- Asian and Pacific Islander Wellness Center, Inc.norm: asian and pacific islander wellness center
- Domain
- sfcommunityhealth.org
Victim entity
- Name
- Asian and Pacific Islander Wellness Center, Inc.norm: asian and pacific islander wellness center
- Domain
- sfcommunityhealth.org
Incident
- Discovered
- Dec 12, 2025
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Third party
- via TriZetto Provider Solutions
- Initial access
- supply_chain
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.