PhysicalHealthcareHealthcareTheftCustomer Data InvolvedEmployee Data InvolvedPHIHealth (basic)Government IDIdentity (basic)Financial accountMediumContained

LAC+USC Medical Center

bd_6f2e8c3f44cc8f3e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 3, 2015

Filed

Apr 29, 2015

To disclose

26 days

Affected

900state residents only

Confidence

67%

Full breach record for LAC+USC Medical Center →

LAC+USC Medical Center/Augustus F. Hawkins Mental Health Center notified patients that confidential medical records for approximately 900 individuals were seized by law enforcement from an employee's home during a search warrant execution on April 3, 2015. The records, dating from 2011-2015, contained names, SSNs, diagnoses, and insurance info. The incident is classified as physical theft/loss of data. The organization offered one year of identity theft protection and is reviewing security practices.

J jump to incidentP pin to compareR raw source

California clockDiscovered Apr 3, 2015 → Notified Apr 23, 201520d ✓ CA 60-day OK26 days discovery → filing

Incident timeline

discovery → filing · 26 days

Apr 3, 2015

Discovered

Apr 29, 2015

Filed

vs. sector median

9 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed900 affectedView incident

Name: LAC+USC Medical Center
norm: lac usc medical center

Name: LAC+USC Medical Center
norm: lac usc medical center
Industry: Healthcarellm

Discovered: Apr 3, 2015
Materiality determined: —
Notification sent: Apr 23, 2015
Affected individuals: 900state-resident count only
Data types: PHIHealth (basic)Government IDIdentity (basic)Financial account
Data elements: Date of birthMedical information
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: Internal
Regulator citations: Notified the California Department of Public HealthNotified the California Attorney GeneralNotified federal authoritiesReported to the Health Authority Law Enforcement Task Force (HALT)

During the incident: Reported the incident to the Health Authority Law Enforcement Task Force (HALT)
Working with other law enforcement agencies
Notifying the California Department of Public Health, the California Attorney General, and federal authorities
Conducting a review of its privacy and security practices
Offering one year of free identity theft protection through LifeLock Standard membership
Set up a call center to answer questions
Changes made: Will revise privacy and security practices as needed based on the findings
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 days(26 days from discovery to filing)
Compliance flags: CA 60-day OK · 20d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Apr 3, 2015
→ Notified: Apr 23, 2015
20d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Apr 3, 2015 → Notified: Apr 23, 2015	20d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-55750
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 29, 2015
Raw hash: d166e9692312396537ad9f163e3ffa8ba95fd0a7b4ec13de98feb2e5a531db88

Reporting entityLAC+USC Medical Center

Victim entityLAC+USC Medical Center

Incidentdiscovered Apr 3, 2015

Stated responseReported the incident to the Health Authority Law Enforcement Task Force (HALT)

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov