HackingHealthcareHealthcareCustomer Data InvolvedEmployee Data InvolvedPHIIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

Deanco Healthcare LLC

bd_75797ea0b6d3ce1d · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 1, 2023

Filed

Nov 21, 2023

To disclose

29 weeks

Affected

Not disclosed

Confidence

66%

Full breach record for Deanco Healthcare LLC →2 incidents on file

Mission Community Hospital (dba of Deanco Healthcare LLC) notified patients of unauthorized access to its IT network on May 1, 2023. An external party accessed files containing patient information, including names, addresses, dates of birth, Social Security numbers, driver's license numbers, financial account information, health insurance IDs, claims data, and clinical information. The hospital engaged a cybersecurity firm and is offering one year of Experian IdentityWorks. The incident affected residents in California and other states.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 29 weeks / 204 days

May 1, 2023

Begins

May 1, 2023

Discovered

Nov 21, 2023

Filed

vs. sector median

+17 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Deanco Healthcare LLC
norm: deanco healthcare

Name: Deanco Healthcare LLC
norm: deanco healthcare
Also named: Deanco Healthcare LLCdba oflegal entity
Mission Community Hospitaldba oftrade name
Industry: Healthcarellm

Discovered: May 1, 2023
Breach occurred: May 1, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PHIIdentity (basic)Government IDFinancial accountHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Launched an investigation
Engaged a cybersecurity firm to assist
Offering a complimentary one-year membership to Experian IdentityWorks
Changes made: Implemented additional safeguards and technical security measures to further protect and monitor our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 weeks(204 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-576874
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 21, 2023
Raw hash: 2b93c21aed0ee574596232394790988186f1661bf9c98dccbceab6cd4b6cf479

Reporting entityDeanco Healthcare LLC

Victim entityDeanco Healthcare LLC

Incidentdiscovered May 1, 2023

Stated responseLaunched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov