PhysicalHealthcareManufacturingHealthcareLossEmployee Data InvolvedIdentity (basic)Government IDEmploymentMediumContained

ABBOTT LABORATORIES

bd_4a8d276eef928ef6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 19, 2019

Filed

Feb 5, 2019

To disclose

17 days

Affected

Not disclosed

Linked

4 filings

Confidence

64%

Full breach record for ABBOTT LABORATORIES →3 incidents on file

Abbott Laboratories notified individuals that a portable drive containing employee personal information (name, SSN, DOB, employee ID, stock option info) was misplaced by a third-party auditor. The drive was provided on Jan 9, 2019, and reported missing on Jan 19, 2019. Abbott launched an investigation and is offering 24 months of identity protection via AllClear ID.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jan 19, 2019 → Notified Feb 6, 201918d ✓ CA 60-day OK17 days discovery → filing

Incident timeline

undetected · 10 days

discovery → filing · 17 days

Jan 9, 2019

Begins

Jan 19, 2019

Discovered

Feb 5, 2019

Filed

vs. sector median

9 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

New Hampshire State AGbd_40c8535529672bd52019-02-05Verified
Massachusetts State AGbd_6914ee3dc136d1dd2019-02-05Verified
Montana State AGbd_09adab384bda12682019-02-06 · +1dCandidate

Name: ABBOTT LABORATORIES
norm: abbott laboratories
Domain: abbott.com

Name: ABBOTT LABORATORIES
norm: abbott laboratories
Domain: abbott.com
Industry: HealthcarellmManufacturingllm

Discovered: Jan 19, 2019
Breach occurred: Jan 9, 2019 – Jan 19, 2019
Undetected for: 10 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 6, 2019
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security numberDate of birth
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Third party: via Third-party auditor

During the incident: Launched investigations to locate the drive
Determined whether proper procedures were followed
Reassessing its own internal controls and the controls of its third-party auditor
Arranged to have AllClear ID protect your identity for 24 months at no cost
Changes made: Reassessing its own internal controls and the controls of its third-party auditor to ensure that Abbott employee data continues to be treated appropriately
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 days(17 days from discovery to filing)
Compliance flags: CA 60-day OK · 18d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jan 19, 2019
→ Notified: Feb 6, 2019
18d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jan 19, 2019 → Notified: Feb 6, 2019	18d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGFeb 5 · first

Massachusetts State AGFeb 5 · first

California State AGFeb 5 · first · this page

Montana State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-144435
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 5, 2019
Raw hash: 55a21ba511e086566b1206de5367aeaea491d6656fbab6b4bc90e66a842785a7

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityABBOTT LABORATORIES

Victim entityABBOTT LABORATORIES

Incidentdiscovered Jan 19, 2019

Stated responseLaunched investigations to locate the drive

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov