PhysicalTheftCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
Napa Valley Dentistry
bd_44b57de963b638a3 · schema v1 · pii pii-v1
Full breach record for Napa Valley Dentistry →Napa Valley Dentistry reported the theft of a password-protected server from a secured storage unit on August 11, 2016. The server contained personal information including names, addresses, dates of birth, Social Security numbers, and dental insurance information for current and former patients. The organization notified the Napa Police Department and offered 12 months of complimentary credit monitoring and identity protection services through Kroll. No misuse of the information was known at the time of notification.
California clockDiscovered Aug 11, 2016 → Notified Sep 8, 201628d ✓ CA 60-day OK6 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_5198e8f67dff76e5Montana State AGfiled 2016-09-22Verified
- bd_43c196b461ebd727HHS OCRfiled 2016-10-05(13d gap)Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-64007
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 22, 2016
- Raw hash
- cc4c23ef01beec0a92bcf50ec7d667cfb4a9afc273b9f36ac0b05ffe99b2871d
Reporting entity
- Name
- Napa Valley Dentistrynorm: napa valley dentistry
Victim entity
- Name
- Napa Valley Dentistrynorm: napa valley dentistry
Incident
- Discovered
- Aug 11, 2016
- Materiality determined
- —
- Notification sent
- Sep 8, 2016
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Threat actor
- External
- Regulator citations
- Notified the Napa Police Department
Compliance
- Time to disclose
- 6 weeks(42 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 28d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Aug 11, 2016→ Notified: Sep 8, 201628d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.