HackingData ExfiltratedData PublishedCustomer Data InvolvedEmployee Data InvolvedPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
Omni Family Health
bd_73bc9113ae62ccb1 · schema v1 · pii pii-v1
Full breach record for Omni Family Health →Omni Family Health notified patients of a data breach discovered on August 7, 2024, involving personal and health information posted on the dark web. Affected data includes names, addresses, SSNs, dates of birth, insurance info, and medical records. The organization engaged cybersecurity specialists and notified law enforcement. Credit monitoring services were offered to affected individuals.
Leak gap clock⏱ Leak >30d9 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_d8334e0eb4c8b728Leak Sitehunters_internationalfiled 2024-08-06(64d gap)Verified
Regulatory filings (1) · sorted by filing gap
- bd_7f0f86440df09954Vermont State AGfiled 2024-10-10Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-593183
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 10, 2024
- Raw hash
- c097012bf523cdb39d78a65e9ca1d6390c316630e07392223ce8c3e1bb7ec8db
Reporting entity
- Name
- Omni Family Healthnorm: omni family health
- Domain
- omnifamilyhealth.org
Victim entity
- Name
- Omni Family Healthnorm: omni family health
- Domain
- omnifamilyhealth.org
Incident
- Discovered
- Aug 7, 2024
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1041 Exfiltration Over C2 ChannelT1560 Data from Cloud Storage Object
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement
Compliance
- Time to disclose
- 9 weeks(64 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.