MalwareHealthcareHealthcareRansomwareCapture Stored DataData ExfiltratedData EncryptedRansom DemandedCustomer Data InvolvedDelayed DiscoveryPIIPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumResolved
United Health Centers of the San Joaquin Valley
bd_621bb548092a4d04 · schema v1 · pii pii-v1
Full breach record for United Health Centers of the San Joaquin Valley →United Health Centers of the San Joaquin Valley (UHC) experienced a ransomware/encryption incident between August 24–28, 2021. UHC discovered compromised data on September 22, 2021, and completed a document review on April 11, 2022. Compromised data includes names, Social Security numbers, and medical record numbers. UHC notified law enforcement, regulatory authorities, and affected individuals, and offered one year of complimentary credit monitoring through Equifax.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_c5ac5c5c6ced9350Montana State AGfiled 2022-08-12(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-556161
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 11, 2022
- Raw hash
- 63a81a0fc8c1fd76807e6ade22dedb8680619cfc00e1c46dd07a4e697967447e
Reporting entity
- Name
- United Health Centers of the San Joaquin Valleynorm: united health centers of the san joaquin valley
Victim entity
- Name
- United Health Centers of the San Joaquin Valleynorm: united health centers of the san joaquin valley
- Industry
- Healthcarellm
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcementNotified appropriate regulatory authorities
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.