MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
LA CLINICA DE LA RAZA, INC.
bd_48fbc1ca45078c3d · schema v1 · pii pii-v1
Full breach record for LA CLINICA DE LA RAZA, INC. →La Clinica de La Raza, Inc. reported a data security incident involving malware deployment on systems storing patient information. Unauthorized access occurred on January 12, 2021, affecting patient names, DOBs, addresses, health insurance info, and health records. The incident was discovered on January 28, 2021. La Clinica disconnected affected systems, engaged forensic investigators, and notified federal law enforcement. Remediation included enhanced security measures and workforce training.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_4a68219b64de58a3HHS OCRfiled 2021-03-29Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-539567
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 29, 2021
- Raw hash
- de9aa8de35a27d07c2404048ed5ae68e7ba4e85eef960668942e08c7496e2fb7
Reporting entity
- Name
- LA CLINICA DE LA RAZA, INC.norm: la clinica de la raza
Victim entity
- Name
- LA CLINICA DE LA RAZA, INC.norm: la clinica de la raza
Incident
- Discovered
- Jan 28, 2021
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- notified federal law enforcement authorities
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.