HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)Health (basic)MediumActive

Dignity Health Lassen Medical Clinic - Red Bluff and Dignity Health Lassen Medical Clinic - Cottonwood

bd_46d55161d2470d27 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Sep 20, 2024

Filed

Dec 2, 2025

To disclose

—

Affected

1state residents only

Confidence

66%

Full breach record for Dignity Health Lassen Medical Clinic - Red Bluff and Dignity Health Lassen Medical Clinic - Cottonwood →

Dignity Health Lassen Medical Clinic (Red Bluff and Cottonwood, CA) notified Nebraska AG of a cyber event discovered Sept 20, 2024. Unauthorized access occurred Sept 17-20, 2024. One Nebraska resident's name, SSN, and confidential medical info were accessed. Notices began Dec 24, 2024. Response included forensic investigation, law enforcement notification, and 12 months of Kroll credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

Sep 17, 2024

Begins

Sep 20, 2024

Discovered

Dec 2, 2025

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Dignity Health Lassen Medical Clinic - Red Bluff and Dignity Health Lassen Medical Clinic - Cottonwood
norm: dignity health lassen medical clinic red bluff and dignity health lassen medical clinic cottonwood

Name: Dignity Health Lassen Medical Clinic - Red Bluff and Dignity Health Lassen Medical Clinic - Cottonwood
norm: dignity health lassen medical clinic red bluff and dignity health lassen medical clinic cottonwood
Industry: Healthcarellm

Discovered: Sep 20, 2024
Breach occurred: Sep 17, 2024 – Sep 20, 2024
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 24, 2024
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)Health (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Provided written notice to relevant state and federal regulatorsNotifying the U.S. Department of Health and Human Services
Initial access: exploit_public_facing

During the incident: Engaged external forensics vendor
Notified law enforcement
Provided access to credit monitoring services for twelve (12) months through Kroll
Provided guidance on how to better protect against identity theft and fraud
Provided written notice to relevant state and federal regulators
Notifying the U.S. Department of Health and Human Services
Changes made: Secured the services of Kroll to provide identity monitoring
Returned systems to the network with additional security and monitoring tools
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/18424f7e-1c93-4236-9d65-d28544aa9227.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 2, 2025
Raw hash: 9a9b629a6ddec4e5fb0f5c9ccb7d984b47e0396bf36f03c736e79c3958e95831

Reporting entityDignity Health Lassen Medical Clinic - Red Bluff and Dignity Health Lassen Medical Clinic - Cottonwood

Victim entityDignity Health Lassen Medical Clinic - Red Bluff and Dignity Health Lassen Medical Clinic - Cottonwood

Incidentdiscovered Sep 20, 2024

Stated responseEngaged external forensics vendor

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov