HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
A1 Senior Living
bd_56453ba7eacccb44 · schema v1 · pii pii-v1
Full breach record for A1 Senior Living →Elmcroft Senior Living, Inc. reported a data breach in California affecting residents and patients. Between May 10 and May 12, 2018, an unauthorized third party accessed servers containing personal and health information, including names, dates of birth, addresses, and Social Security numbers. Elmcroft terminated access, notified law enforcement, and engaged Kroll to provide one year of free identity monitoring services to affected individuals.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_121717ac4f1810f7Delaware State AGfiled 2018-06-08(7d gap)Verified
- bd_8f5f94f192c567b3Montana State AGfiled 2018-06-08(7d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-136753
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 1, 2018
- Raw hash
- 12d4db24df478ca21fb814224c52302502184cfa315fb1f85ea1e1d9ce3f3251
Reporting entity
- Name
- A1 Senior Livingnorm: a1 senior living
- Domain
- a1seniorliving.com
Victim entity
- Name
- A1 Senior Livingnorm: a1 senior living
- Domain
- a1seniorliving.com
Incident
- Discovered
- May 12, 2018
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- notified local and federal law enforcement agencies and are cooperating with those entities as they investigate this incident
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 20 days(20 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.