PhysicalLossCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowContained
St. Joseph Medical Center
bd_47d19bbe02381d57 · schema v1 · pii pii-v1
Full breach record for St. Joseph Medical Center →St Mary Medical Center reported the loss of an unencrypted thumb drive containing patient medical information, including names, account numbers, diagnoses, admission/discharge dates, physician names, and medical record numbers. The incident was discovered on May 8, 2012. The drive did not contain SSNs, driver's license numbers, or home addresses. The hospital is reviewing security policies and increasing IT security education.
California clockDiscovered May 8, 2012 → Notified May 14, 20126d ✓ CA 60-day OK6 days discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_300e825a1a5701cbHHS OCRfiled 2012-05-14Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-23173
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 14, 2012
- Raw hash
- 53e41d6fd1ace0b6c44b15dfd0803e5dcbfe2db26e5fb87bffa265dc36cde700
Reporting entity
- Name
- St. Joseph Medical Centernorm: st joseph medical center
Victim entity
- Name
- St. Joseph Medical Centernorm: st joseph medical center
Incident
- Discovered
- May 8, 2012
- Materiality determined
- —
- Notification sent
- May 14, 2012
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
Compliance
- Time to disclose
- 6 days(6 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 6d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 8, 2012→ Notified: May 14, 20126d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.