DisclosureLens
HackingHealthcareHealthcareBusiness Associate (HIPAA)Customer Data InvolvedPHIHealth (basic)Identity (basic)BiometricMediumContained

Birth Choice of San Marcos

bd_7430ce45d00d8c65 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 16, 2024

Filed

Oct 16, 2024

To disclose

31 weeks

Affected

Not disclosed

Confidence

65%
Full breach record for Birth Choice of San Marcos

National Diagnostic Imaging (NDI), a business associate of Birth Choice of San Marcos, experienced unauthorized access to its network between February 19, 2024, and March 27, 2024. The incident was discovered on March 16, 2024, when NDI experienced a network disruption. Affected data includes Protected Health Information (PHI) such as client names, dates of birth, last menstrual period (LMP), clinical information, and biometrics. NDI isolated the network, engaged forensic investigators, and notified law enforcement. No evidence of data misuse was found.

California clockDiscovered Mar 16, 2024Notified Oct 22, 2024220d CA 60-day late31 weeks discovery → filing

Incident timeline

undetected · 26 days
discovery → filing · 31 weeks / 214 days

Feb 19, 2024

Begins

Mar 16, 2024

Discovered

Oct 16, 2024

Filed

vs. sector median

+19 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.