AccidentalMisconfigurationEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)MediumResolved

Corovan Anywhere

bd_4d023924e41e2c80 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 17, 2017

Filed

Jan 18, 2018

To disclose

13 weeks

Affected

733state residents only

Confidence

64%

Full breach record for Corovan Anywhere →

Corovan Corporation disclosed that files containing employee names, addresses, Social Security numbers, and health insurance information were temporarily browsable via Google search due to a server misconfiguration between September 14-18, 2017. The company discovered the issue on October 17, 2017, and notified approximately 733 California residents in January 2018. No evidence of data misuse was found.

J jump to incidentP pin to compareR raw source

California clockDiscovered Oct 17, 2017 → Notified Jan 16, 201891d ✗ CA 60-day late13 weeks discovery → filing

Incident timeline

undetected · 33 days

discovery → filing · 13 weeks / 93 days

Sep 14, 2017

Begins

Oct 17, 2017

Discovered

Jan 18, 2018

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed733 affectedView incident

Name: Corovan Anywhere
norm: corovan anywhere
Domain: corovananywhere.com

Name: Corovan Anywhere
norm: corovan anywhere
Domain: corovananywhere.com

Discovered: Oct 17, 2017
Breach occurred: Sep 14, 2017 – Sep 18, 2017
Undetected for: 33 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 16, 2018
Affected individuals: 733state-resident count only
Data types: Identity (basic)Government IDHealth (basic)
Attack vector: Misconfiguration
Regulator citations: Providing notice of this incident to the California Attorney GeneralProviding written notice of this incident to other state regulators and consumer reporting agencies as necessary

During the incident: Launched an investigation to determine which files were browsed and which individuals’ information was contained in the files
Took steps to investigate and mitigate the impact of this incident, with the assistance of a third-party forensic investigation firm
Took steps to remove the sensitive files from Google through the use of Google’s online content removal forms and through direct communication to Google
Engaged a vendor to provide advanced address look-up services to ensure notice would be mailed to the person’s most recent address on record
Provided all potentially affected individuals access to one (1) free year of credit and identity monitoring services, including identity restoration services, through IDExperts
Established a dedicated hotline for potentially affected individuals to contact with questions or concerns regarding this incident
Provided potentially impacted individuals with guidance on how to better protect against identity theft and fraud
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(93 days from discovery to filing)
Compliance flags: CA 60-day late · 91d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Oct 17, 2017
→ Notified: Jan 16, 2018
91d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Oct 17, 2017 → Notified: Jan 16, 2018	91d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-132931
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 18, 2018
Raw hash: 35a2d6a154d5655749e57dd49a2f027255a8b8b087c9da00ca6071a3af87605e

Reporting entityCorovan Anywhere

Victim entityCorovan Anywhere

Incidentdiscovered Oct 17, 2017

Stated responseLaunched an investigation to determine which files were browsed and which individuals’ information was contained in the files

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov