MisusePrivilege AbuseEmployee Data InvolvedCustomer Data InvolvedDelayed DiscoveryPHIHEALTH_BASICIDENTITY_BASICLowResolved
TapestryHealth
bd_61b058827a2a530b · schema v1 · pii pii-v1
Full breach record for TapestryHealth →TapestryHealth disclosed that a contracted employee engaged in unauthorized job-sharing, allowing an unidentified individual to access patient personal and medical information between November 6, 2024, and November 3, 2025. The incident was discovered on November 3, 2025. Affected data included names, facility information, and medical records (diagnoses, treatments, medications). The employee was terminated, and access limitations were implemented. Credit monitoring was offered to affected individuals.
California clockDiscovered Nov 3, 2025 → Notified Dec 22, 202549d ✓ CA 60-day OK7 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_23fb67706c24c228HHS OCRfiled 2025-12-22Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-616154
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 22, 2025
- Raw hash
- 9b0510176a344d5125792c3db6d0fcdcc1a0d0098585b7a688cb89c76414e091
Reporting entity
- Name
- TapestryHealthnorm: tapestryhealth
Victim entity
- Name
- TapestryHealthnorm: tapestryhealth
Incident
- Discovered
- Nov 3, 2025
- Materiality determined
- —
- Notification sent
- Dec 22, 2025
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Insider
- Threat actor
- Internal
- Initial access
- insider_action
Compliance
- Time to disclose
- 7 weeks(49 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 49d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 3, 2025→ Notified: Dec 22, 202549d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.