MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedSupply Chain (3P Vendor)IDENTITY_BASICPIILowContained
AETNA INC.
bd_67bd072abaa13d8e · schema v1 · pii pii-v1
Full breach record for AETNA INC. →Aetna, via its vendor OneTouchPoint, Inc. (OTP), disclosed a ransomware incident discovered on April 28, 2022. Unauthorized access to OTP servers began April 27, 2022, resulting in encrypted files. OTP engaged forensic specialists and law enforcement. Customer data, including names and specific data elements, was present on impacted servers; Social Security numbers were not affected. Notification was sent to affected individuals starting June 3, 2022. No evidence of misuse was found.
California clockDiscovered Apr 28, 2022 → Notified Jun 3, 202236d ✓ CA 60-day OK13 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-555662
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 27, 2022
- Raw hash
- 32950c434a22b22d520545684cf883b6459b7a8e1385c6fdd0c28e3fdbf0a65a
Reporting entity
- Name
- OneTouchPoint, Inc.norm: onetouchpoint
- Domain
- onetouchpoint.com
Victim entity
- Name
- AETNA INC.norm: aetna
- Domain
- aetna.com
Incident
- Discovered
- Apr 28, 2022
- Materiality determined
- —
- Notification sent
- Jun 3, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 13 weeks(90 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 36d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 28, 2022→ Notified: Jun 3, 202236d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.