HackingCustomer Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIMediumContained
Harbor Developmental Disabilities Foundation
bd_5a812851b43801ce · schema v1 · pii pii-v1
Full breach record for Harbor Developmental Disabilities Foundation →Harbor Developmental Disabilities Foundation (d/b/a Harbor Regional Center) notified individuals of a data breach occurring on March 6-7, 2026, discovered on March 7, 2026. An unauthorized individual accessed personal information, including names, addresses, SSNs, and health records. The organization engaged forensic investigators and is providing 12 months of credit monitoring and fraud assistance to affected individuals in multiple states.
California clockDiscovered Mar 7, 2026 → Notified May 28, 202682d ✗ CA 30-day late12 weeks discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_7b9cece4187569a9HHS OCRfiled 2026-04-22(36d gap)Verified
- bd_9b166fd801f03fafIndiana State AGfiled 2026-04-22(36d gap)Verified
- bd_d9e6069e2c2c9535California State AGfiled 2026-04-22(36d gap)Verified
- bd_818cdfa0c33f731bCalifornia State AGfiled 2026-07-13(46d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-624044
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 28, 2026
- Raw hash
- acc0c5e501201bcfc86096d01ed09997adbdf645128fca6e45e49a2c0605bd22
Reporting entity
- Name
- Harbor Developmental Disabilities Foundationnorm: harbor developmental disabilities
Victim entity
- Name
- Harbor Developmental Disabilities Foundationnorm: harbor developmental disabilities
Incident
- Discovered
- Mar 7, 2026
- Materiality determined
- —
- Notification sent
- May 28, 2026
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Unknown
- Threat actor
- External
Compliance
- Time to disclose
- 12 weeks(82 days from discovery to filing)
- Compliance flags
- CA 30-day late · 82dCA AG copy ≤15d · 0d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 7, 2026→ Notified: May 28, 202682d 30 calendar days CA 30-day late California Consumers notified: May 28, 2026→ AG copy submitted: May 28, 20260d 15 calendar days CA AG copy ≤15d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.