HackingBusiness Associate (HIPAA)Customer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICBIOMETRICMediumContained
National Diagnostic Imaging
bd_7430ce45d00d8c65 · schema v1 · pii pii-v1
Full breach record for National Diagnostic Imaging →National Diagnostic Imaging (NDI), a business associate of Birth Choice of San Marcos, experienced unauthorized access to its network between February 19, 2024, and March 27, 2024. The incident was discovered on March 16, 2024, when NDI experienced a network disruption. Affected data includes Protected Health Information (PHI) such as client names, dates of birth, last menstrual period (LMP), clinical information, and biometrics. NDI isolated the network, engaged forensic investigators, and notified law enforcement. No evidence of data misuse was found.
California clockDiscovered Mar 16, 2024 → Notified Oct 22, 2024220d ✗ CA 60-day late31 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-593443
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 16, 2024
- Raw hash
- dfc398cba85e17510f38de487fcdef5fb7885e6389619ed4f5990392ea53b8fa
Reporting entity
- Name
- Friends of Birth Choicenorm: friends of birth choice
- Domain
- friendsofbirthchoice.net
Victim entity
- Name
- National Diagnostic Imagingnorm: national diagnostic imaging
- Domain
- ndximaging.com
Incident
- Discovered
- Mar 16, 2024
- Materiality determined
- —
- Notification sent
- Oct 22, 2024
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASICBIOMETRIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Third party
- via National Diagnostic Imaging
Compliance
- Time to disclose
- 31 weeks(214 days from discovery to filing)
- Compliance flags
- CA 60-day late · 220d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 16, 2024→ Notified: Oct 22, 2024220d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.