HackingCustomer Data InvolvedBusiness Associate (HIPAA)IDENTITY_BASICPHIHEALTH_BASICLowContained
Navvis & Company, LLC
bd_495a8622b7338450 · schema v1 · pii pii-v1
Full breach record for Navvis & Company, LLC →Navvis & Company, LLC, a health management services provider, reported unauthorized access to its network between July 12 and July 25, 2023. The company identified suspicious activity on July 25, 2023. Affected data may include names and health-related information. Navvis is a business associate of SSM Health. The company secured its network, launched an investigation, and offered credit monitoring to affected individuals.
California clockDiscovered Jul 25, 2023 → Notified Dec 29, 2023157d ✗ CA 60-day late22 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_807126e4c7ec4b16Oregon State AGfiled 2023-12-29Candidate
- bd_9514dafc4153c0c8Washington State AGfiled 2023-12-29Verified by operator
- bd_f4c28766fb97e655California State AGfiled 2024-01-09(11d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-578562
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 29, 2023
- Raw hash
- 19ac461861cbdefad593dab1721e46d9fbc6d679d11e6ecccd16c8acc7bd0756
Reporting entity
- Name
- Navvis & Company, LLCnorm: navvis
Victim entity
- Name
- Navvis & Company, LLCnorm: navvis
Incident
- Discovered
- Jul 25, 2023
- Materiality determined
- —
- Notification sent
- Dec 29, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPHIHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified applicable regulatory authorities
Compliance
- Time to disclose
- 22 weeks(157 days from discovery to filing)
- Compliance flags
- CA 60-day late · 157d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 25, 2023→ Notified: Dec 29, 2023157d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.