MalwareRansomwareData EncryptedCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowContained
Granite Wellness Centers
bd_66aa8648648a64f5 · schema v1 · pii pii-v1
Full breach record for Granite Wellness Centers →Granite Wellness Centers experienced a ransomware attack discovered on January 5, 2021, which encrypted data on their servers. The incident affected client personal information including full name, date of birth, dates of care, treatment/health information, treatment provider, and health insurer. The organization took affected systems offline, reported to law enforcement, and restored systems from backups. No actual misuse of personal information was known.
California clockDiscovered Jan 5, 2021 → Notified Jan 28, 202123d ✓ CA 60-day OK4 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_557c4abf43138aa0HHS OCRfiled 2021-02-04Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-537752
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 4, 2021
- Raw hash
- 5a5238776dfb7533117ff2648b9521dd6a206f3cbbdb9c4123d3ad99206b50f6
Reporting entity
- Name
- Granite Wellness Centersnorm: granite wellness centers
Victim entity
- Name
- Granite Wellness Centersnorm: granite wellness centers
Incident
- Discovered
- Jan 5, 2021
- Materiality determined
- —
- Notification sent
- Jan 28, 2021
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- Notifying state and federal regulators, as required
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 23d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 5, 2021→ Notified: Jan 28, 202123d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.