AccidentalMisdeliverySupply Chain (3P Vendor)Customer Data InvolvedEmployee Data InvolvedPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumResolved
Western Health Advantage
bd_74bcb80ab523a0fa · schema v1 · pii pii-v1
Full breach record for Western Health Advantage →Western Health Advantage (WHA) notified members and providers of a security incident on October 25, 2019, caused by a computer system error at a contracted vendor. The error resulted in WHA files being downloaded to another company's server. Affected data included names, addresses, dates of birth, member IDs, service dates, diagnosis codes, procedure codes, provider names, NPI numbers, and Social Security Numbers. No evidence of misuse was found. WHA offered one year of free credit monitoring.
California clockDiscovered Oct 25, 2019 → Notified Dec 12, 201948d ✓ CA 60-day OK7 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_efc133ac7105c25bHHS OCRfiled 2019-12-13Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-185138
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 13, 2019
- Raw hash
- d36662c65c895eb4c0aca2d05edc416eab0cb4e3311922d8d3196082618f9f03
Reporting entity
- Name
- Western Health Advantagenorm: western health advantage
Victim entity
- Name
- Western Health Advantagenorm: western health advantage
Incident
- Discovered
- Oct 25, 2019
- Materiality determined
- —
- Notification sent
- Dec 12, 2019
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- Regulator citations
- Filed notification with California Attorney General
- Third party
- via Contracted Vendor
Compliance
- Time to disclose
- 7 weeks(49 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 48d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 25, 2019→ Notified: Dec 12, 201948d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.