DisclosureLens
MalwareHealthcareHealthcareCustomer Data InvolvedDelayed DiscoveryPHIHealth (basic)Identity (basic)Government IDMediumContained

Kaiser Permanente Northern CA Department of Research

bd_538198849343e32f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 12, 2014

Filed

Apr 2, 2014

To disclose

7 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Kaiser Permanente Northern CA Department of Research discovered on Feb 12, 2014, that a server storing research data was infected with malicious software, believed to have occurred in Oct 2011. The malware compromised security barriers, potentially exposing PHI including names, DOB, gender, address, race/ethnicity, MRN, lab results, and research responses. SSNs and EMRs were not included. No evidence of unauthorized access or exfiltration was found. The server was removed, and authorities were notified.

California clockDiscovered Feb 12, 2014Notified Apr 3, 201450d CA 60-day OK7 weeks discovery → filing

Incident timeline

undetected · 865 days
discovery → filing · 7 weeks / 49 days

Oct 1, 2011

Begins

Feb 12, 2014

Discovered

Apr 2, 2014

Filed

vs. sector median

6 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings

View merged incident ↗
HHS OCRApr 2 · first
California State AGApr 2 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.