AccidentalProgramming ErrorCustomer Data InvolvedIDENTITY_BASICHEALTH_BASICLowResolved
ZOCDOC, INC.
bd_50641af42be3e964 · schema v1 · pii pii-v1
Full breach record for ZOCDOC, INC. →Zocdoc, Inc. notified California residents that programming errors in its Provider Dashboard access management allowed some past or current staff members of medical/dental practices to potentially view personal information (name, email, phone, appointment history, insurance ID, medical history) after their authorization was revoked. The error was discovered in June 2015 and repaired. No financial data or SSNs were stored, though SSN was listed as potentially accessed if previously provided. Zocdoc offered one year of Experian ProtectMyID Elite.
California clockDiscovered Jun 1, 2015 → Notified May 16, 2016350d ✗ CA 60-day late50 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-61838
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 16, 2016
- Raw hash
- eabbd4e2360d466eb653fcafbeb0f39ea0e4c2773a2a38ce511d5772604522f5
Reporting entity
- Name
- ZOCDOC, INC.norm: zocdoc
- Domain
- zocdoc.com
Victim entity
- Name
- ZOCDOC, INC.norm: zocdoc
- Domain
- zocdoc.com
Incident
- Discovered
- Jun 1, 2015
- Materiality determined
- —
- Notification sent
- May 16, 2016
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unknown
Compliance
- Time to disclose
- 50 weeks(350 days from discovery to filing)
- Compliance flags
- CA 60-day late · 350d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 1, 2015→ Notified: May 16, 2016350d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.