MisusePrivilege AbuseEmployee Data InvolvedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIMediumContained
Muir Medical Group, IPA. Inc.
bd_6a3fc94325935086 · schema v1 · pii pii-v1
Full breach record for Muir Medical Group, IPA. Inc. →Muir Medical Group, IPA, Inc. notified California regulators of a data breach involving a former employee who took patient information before her employment ended in December 2017. The incident, discovered in March 2018, exposed demographic data, SSNs, insurance details, and clinical records. The company engaged forensic investigators and offered one year of identity monitoring via Kroll to affected individuals.
California clockDiscovered Mar 7, 2018 → Notified May 1, 201855d ✓ CA 60-day OK11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_2d64b798aa7d5d45HHS OCRfiled 2018-05-22Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-136437
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 22, 2018
- Raw hash
- 23e7bdde4e74ec09c2d07dcc522fcbf86f65a8501e27717200f6ee6608e5be6b
Reporting entity
- Name
- Muir Medical Group, IPA. Inc.norm: muir medical group ipa
Victim entity
- Name
- Muir Medical Group, IPA. Inc.norm: muir medical group ipa
Incident
- Discovered
- Mar 7, 2018
- Materiality determined
- Dec 7, 2017
- Notification sent
- May 1, 2018
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- Internal
- Regulator citations
- Submitted Breach Notification to California Office of the Attorney General
- Initial access
- insider_action
Compliance
- Time to disclose
- 11 weeks(76 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 55d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 7, 2018→ Notified: May 1, 201855d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.