Social EngineeringHealthcareHealthcarePhishingEmployee Data InvolvedGovernment IDEmploymentFinancial accountMediumContained

Momentum Mental Health

bd_5a29cc5892dac7f3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 3, 2016

Filed

Jun 13, 2016

To disclose

10 days

Affected

Not disclosed

Confidence

65%

Full breach record for Momentum Mental Health →

On June 3, 2016, Momentum for Mental Health was targeted by an email spoofing scam. The incident resulted in the inadvertent disclosure of W-2 information (name, SSN, wages, taxes) for current and former employees. The company discovered the incident within hours, confirmed it was isolated, contacted law enforcement, and offered three years of identity protection. Remediation included policy reviews and employee training.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jun 3, 2016 → Notified Jun 9, 20166d ✓ CA 60-day OK10 days discovery → filing

Incident timeline

discovery → filing · 10 days

Jun 3, 2016

Begins

Jun 3, 2016

Discovered

Jun 13, 2016

Filed

vs. sector median

11 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Momentum Mental Health
norm: momentum mental health
Domain: momentummh.com

Name: Momentum Mental Health
norm: momentum mental health
Domain: momentummh.com
Industry: Healthcarellm

Discovered: Jun 3, 2016
Breach occurred: Jun 3, 2016
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 9, 2016
Affected individuals: Not disclosed
Data types: Government IDEmploymentFinancial account
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Initial access: phishing_link

During the incident: Confirmed that this attack was an isolated incident
Determined which employees – current and former – may have been impacted
Contacted the relevant law enforcement authorities and will cooperate in any investigation
Offering three years of identity protection at no cost to you
Changes made: Comprehensive review of our policies and procedures for safeguarding employees’ personal information
Additional training for employees with access to that data
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 days(10 days from discovery to filing)
Compliance flags: CA 60-day OK · 6d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jun 3, 2016
→ Notified: Jun 9, 2016
6d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jun 3, 2016 → Notified: Jun 9, 2016	6d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-62338
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 13, 2016
Raw hash: 736fb17cfb41249b2128ca4f85bb4ceb251b4aca317af0658a6539fb6f7e83f1

Reporting entityMomentum Mental Health

Victim entityMomentum Mental Health

Incidentdiscovered Jun 3, 2016

Stated responseConfirmed that this attack was an isolated incident

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov