HackingData ExfiltratedCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Rebound Orthopedics & Neurosurgery
bd_71c01ecf99a478c7 · schema v1 · pii pii-v1
Full breach record for Rebound Orthopedics & Neurosurgery →Rebound Orthopedics & Neurosurgery notified the California AG of an incident where an unauthorized actor accessed systems between Feb 1-3, 2024, viewing or copying files containing medical, financial, and government ID data. The organization engaged forensic specialists, secured systems, notified law enforcement, and offered credit monitoring. No evidence of fraudulent misuse was found.
California clockDiscovered Feb 3, 2024 → Notified Apr 15, 202472d ✗ CA 60-day late12 months discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_c3dd632a31535193Vermont State AGfiled 2025-02-04Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-598260
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 4, 2025
- Raw hash
- 4bcf05a1b72bdc82c2ac5f793c601cf9be8d2279bd0498df2f53b3133ca38152
Reporting entity
- Name
- Rebound Orthopedics & Neurosurgerynorm: rebound orthopedics neurosurgery
Victim entity
- Name
- Rebound Orthopedics & Neurosurgerynorm: rebound orthopedics neurosurgery
Incident
- Discovered
- Feb 3, 2024
- Materiality determined
- —
- Notification sent
- Apr 15, 2024
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement
Compliance
- Time to disclose
- 12 months(367 days from discovery to filing)
- Compliance flags
- CA 60-day late · 72d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 3, 2024→ Notified: Apr 15, 202472d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.