HackingHealthcareHealthcareCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumContained

PIH HEALTH, INC.

bd_732212a788c0ee72 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 1, 2024

Filed

Feb 27, 2026

To disclose

15 months

Affected

Not disclosed

Linked

3 filings

Confidence

66%

Full breach record for PIH HEALTH, INC. →5 incidents on file

PIH Health, Inc. notified the California Attorney General of a data security incident where an unauthorized actor accessed personal information. The breach occurred between November 14 and December 2, 2024, and was discovered on December 1, 2024. The incident affected 174 individuals, including Rhode Island residents. Affected data included names and other personal identifiers. PIH Health secured the network, conducted a forensic review, and is offering complimentary identity protection services.

J jump to incidentP pin to compareR raw source

California clockDiscovered Dec 1, 2024 → Notified Feb 27, 2026453d ✗ CA 60-day late15 months discovery → filing

Incident timeline

undetected · 17 days

discovery → filing · 15 months / 453 days

Nov 14, 2024

Begins

Dec 1, 2024

Discovered

Feb 27, 2026

Filed

vs. sector median

+52 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Illinois State AGbd_32bdf2b91e7ded962026-03-01 · +2dVerified
Washington State AGbd_abce2e8dd5361a402026-03-04 · +5dVerified

Name: PIH HEALTH, INC.
norm: pih health

Name: PIH HEALTH, INC.
norm: pih health
Industry: Healthcarellm

Discovered: Dec 1, 2024
Breach occurred: Nov 14, 2024 – Dec 2, 2024
Undetected for: 17 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 27, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Took measures to secure the network
Launched an investigation to evaluate what happened
Undertook a time intensive and detailed review of all potentially affected data with the assistance of third-party specialists
Implemented additional security measures to help minimize the risk of a similar incident occurring in the future
Offering complimentary identity protection services through Experian
Changes made: Implemented additional security measures to help minimize the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 months(453 days from discovery to filing)
Compliance flags: CA 60-day late · 453d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Dec 1, 2024
→ Notified: Feb 27, 2026
453d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Dec 1, 2024 → Notified: Feb 27, 2026	453d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

California State AGFeb 27 · first · this page

Illinois State AG+2d

Washington State AG+5d

Pattern: first filing Feb 27 (CA), last Mar 4 (WA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-619504
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 27, 2026
Raw hash: 27cae6e6672652da0ec627270a32420c0f7d573993fcc69737999b65500f695b

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityPIH HEALTH, INC.

Victim entityPIH HEALTH, INC.

Incidentdiscovered Dec 1, 2024

Stated responseTook measures to secure the network

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov