PhysicalHealthcareHealthcareTheftCustomer Data InvolvedPHIIdentity (basic)Health (basic)LowContained

Resource Anesthesiology Association

bd_7202dc25802e4932 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 8, 2021

Filed

Sep 5, 2021

To disclose

8 weeks

Affected

1state residents only

Confidence

65%

Full breach record for Resource Anesthesiology Association →

RAA of CA reported the theft of a password-protected laptop containing PHI (names, DOB, diagnosis, insurance) on July 8, 2021. No evidence of misuse. Law enforcement notified. Affected individuals offered 12 months of credit monitoring. Remediation includes encrypting all laptops and staff retraining.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 59 days

Jul 8, 2021

Begins

Jul 8, 2021

Discovered

Sep 5, 2021

Filed

vs. sector median

3 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Resource Anesthesiology Association
norm: resource anesthesiology

Name: Resource Anesthesiology Association
norm: resource anesthesiology
Industry: Healthcarellm

Discovered: Jul 8, 2021
Breach occurred: Jul 8, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 3, 2021
Affected individuals: 1state-resident count only
Data types: PHIIdentity (basic)Health (basic)
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Regulator citations: Filed a police report

During the incident: Contacted law enforcement and filed a police report
Offered identity theft protection services through IDX
Ensuring all health professionals' laptops are encrypted
Reviewing existing policies and procedures related to patient confidentiality
Retraining staff members on appropriate protocols for the storage of patient information
Changes made: Ensuring all health professionals' laptops are encrypted
Reviewing existing policies and procedures related to patient confidentiality
Retraining staff members on appropriate protocols for the storage of patient information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(59 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-3.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 5, 2021
Raw hash: f912441be0a38cc1631c40e6821dde98214a18df65aa199c94cf4a84491ecb76

Reporting entityResource Anesthesiology Association

Victim entityResource Anesthesiology Association

Incidentdiscovered Jul 8, 2021

Stated responseContacted law enforcement and filed a police report

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov