MisuseHealthcareHealthcareData MishandlingCustomer Data InvolvedEmployee Data InvolvedPHIIdentity (basic)Government IDHealth (basic)MediumContained

Muir Medical Group, IPA. Inc.

bd_6a3fc94325935086 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 7, 2018

Filed

May 22, 2018

To disclose

11 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

64%

Full breach record for Muir Medical Group, IPA. Inc. →

Muir Medical Group IPA disclosed that a former employee took personal and clinical information before her employment ended in December 2017. The incident was discovered on March 7, 2018. Affected data includes names, addresses, SSNs, insurance info, and clinical diagnoses. The organization engaged forensics and provided one year of identity monitoring via Kroll.

J jump to incidentP pin to compareR raw source

California clockDiscovered Mar 7, 2018 → Notified Aug 19, 2018165d ✗ CA 60-day late11 weeks discovery → filing

Incident timeline

undetected · 96 days

discovery → filing · 11 weeks / 76 days

Dec 1, 2017

Begins

Mar 7, 2018

Discovered

May 22, 2018

Filed

vs. sector median

2 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_2d64b798aa7d5d452018-05-22Verified

Name: Muir Medical Group, IPA. Inc.
norm: muir medical group ipa

Name: Muir Medical Group, IPA. Inc.
norm: muir medical group ipa
Industry: Healthcarellm

Discovered: Mar 7, 2018
Breach occurred: Dec 1, 2017 – Dec 31, 2017
Undetected for: 96 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 19, 2018
Affected individuals: Not disclosed
Data types: PHIIdentity (basic)Government IDHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Insider
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: Internal
Initial access: insider_action

During the incident: Conducted a thorough investigation
Engaged a leading forensics company
Secured the services of Kroll to provide identity monitoring at no cost to you for one year
Changes made: Taking all reasonable steps to mitigate the circumstances resulting from this incident and to ensure an incident like this does not happen again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(76 days from discovery to filing)
Compliance flags: CA 60-day late · 165d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Mar 7, 2018
→ Notified: Aug 19, 2018
165d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Mar 7, 2018 → Notified: Aug 19, 2018	165d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

HHS OCRMay 22 · first

California State AGMay 22 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-136437
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 22, 2018
Raw hash: 23e7bdde4e74ec09c2d07dcc522fcbf86f65a8501e27717200f6ee6608e5be6b

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityMuir Medical Group, IPA. Inc.

Victim entityMuir Medical Group, IPA. Inc.

Incidentdiscovered Mar 7, 2018

Stated responseConducted a thorough investigation

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov