MisusePrivilege AbuseCustomer Data InvolvedEmployee Data InvolvedHEALTH_BASICIDENTITY_GOVERNMENTMediumContained
California Pacific Medical Center
bd_59a42b43d70adf9e · schema v1 · pii pii-v1
Full breach record for California Pacific Medical Center →California Pacific Medical Center (CPMC) notified 844 patients that a pharmacist employee accessed their medical records out of curiosity between October 2013 and October 2014. The accessed data included demographics, partial SSNs, clinical notes, and prescriptions. The employee was terminated, and patients were notified as a precaution. No malicious intent or financial data was involved.
California clockDiscovered Oct 10, 2014 → Notified Oct 21, 201411d ✓ CA 60-day OK15 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_9cfedf44e9c501feHHS OCRfiled 2015-01-23Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-48217
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 23, 2015
- Raw hash
- 2bee94649f86b29fdc97551c46f443bad26c503eaa5e43a6ea8b79f64745287e
Reporting entity
- Name
- California Pacific Medical Centernorm: california pacific medical center
Victim entity
- Name
- California Pacific Medical Centernorm: california pacific medical center
Incident
- Discovered
- Oct 10, 2014
- Materiality determined
- —
- Notification sent
- Oct 21, 2014
- Affected individuals
- 844
- Data types
- HEALTH_BASICIDENTITY_GOVERNMENT
- Attack vector
- Insider
- MITRE ATT&CK
- T1530 Data from Cloud Storage Object
- Threat actor
- Internal
- Initial access
- insider_action
Compliance
- Time to disclose
- 15 weeks(105 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 11d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 10, 2014→ Notified: Oct 21, 201411d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.