HackingHealthcareHealthcareCustomer Data InvolvedPHIIdentity (basic)Government IDHealth (basic)MediumContained

White and Bright Family Dental

bd_6ae12a4a8b138b22 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 30, 2018

Filed

Feb 19, 2018

To disclose

20 days

Affected

Not disclosed

Confidence

66%

Full breach record for White and Bright Family Dental →

White and Bright Family Dental reported that cyber criminals accessed a business computer server containing protected health information on January 30, 2018. Affected data included patient names, addresses, SSNs, DOBs, driver's license numbers, insurance info, and dental history. The practice notified the Fresno Police Department (Report #18300943) and heightened security measures. It is unknown if data was copied or stolen.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jan 30, 2018 → Notified Feb 16, 201817d ✓ CA 60-day OK20 days discovery → filing

Incident timeline

discovery → filing · 20 days

Jan 30, 2018

Begins

Jan 30, 2018

Discovered

Feb 19, 2018

Filed

vs. sector median

6 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: White and Bright Family Dental
norm: white and bright family dental

Name: White and Bright Family Dental
norm: white and bright family dental
Industry: Healthcarellm

Discovered: Jan 30, 2018
Breach occurred: Jan 30, 2018
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 16, 2018
Affected individuals: Not disclosed
Data types: PHIIdentity (basic)Government IDHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified the Fresno Police DepartmentNotification of government agencies as required

During the incident: Notified the Fresno Police Department
Heightened security measures to prevent a future recurrence
Notification of government agencies as required
Changes made: Heightened security measures to prevent a future recurrence
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 days(20 days from discovery to filing)
Compliance flags: CA 60-day OK · 17d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jan 30, 2018
→ Notified: Feb 16, 2018
17d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jan 30, 2018 → Notified: Feb 16, 2018	17d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-133887
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 19, 2018
Raw hash: f938f541b5b4ef024a05eea3b480a7084154beb56a9dc8f5744aa45b63c363e5

Reporting entityWhite and Bright Family Dental

Victim entityWhite and Bright Family Dental

Incidentdiscovered Jan 30, 2018

Stated responseNotified the Fresno Police Department

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov