HackingHealthcareHealthcareCustomer Data InvolvedPHIIdentity (basic)Health (basic)LowContained

South Coast Pediatrics

bd_785a80731e752469 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 12, 2025

Filed

Aug 5, 2025

To disclose

8 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for South Coast Pediatrics →

South Coast Pediatrics notified patients of a cyberattack on June 12, 2025, involving potential exposure of PHI including names, addresses, DOBs, medical record numbers, diagnoses, and treatment codes. The organization contained the threat, enhanced network security, and notified CA DPH and HHS. No specific malware or threat actor was named.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jun 12, 2025 → Notified Aug 4, 202553d ✓ CA 60-day OK8 weeks discovery → filing

Incident timeline

discovery → filing · 8 weeks / 54 days

Jun 12, 2025

Begins

Jun 12, 2025

Discovered

Aug 5, 2025

Filed

vs. sector median

1 wks faster

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_044bbe81d0e18c5a2025-08-05Candidate

Name: South Coast Pediatrics
norm: south coast pediatrics
Domain: southcoastpediatrics.com

Name: South Coast Pediatrics
norm: south coast pediatrics
Domain: southcoastpediatrics.com
Industry: Healthcarellm

Discovered: Jun 12, 2025
Breach occurred: Jun 12, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 4, 2025
Affected individuals: Not disclosed
Data types: PHIIdentity (basic)Health (basic)
Attack vector: Unauthorized Access
Threat actor: External
Regulator citations: Notified the California Department of Public HealthNotified the Department of Health and Human Services

During the incident: Took steps to contain the threat
Assessed the scope of compromise
Initiated recovery procedures
Confirmed and enhanced the security of our network
Reviewed existing security policies
Notified the California Department of Public Health
Notified the Department of Health and Human Services
Changes made: Implementing additional measures to further protect against similar incidents moving forward
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(54 days from discovery to filing)
Compliance flags: CA 60-day OK · 53d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jun 12, 2025
→ Notified: Aug 4, 2025
53d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jun 12, 2025 → Notified: Aug 4, 2025	53d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

HHS OCRAug 5 · first

California State AGAug 5 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-606667
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 5, 2025
Raw hash: 7aa19a5101e559205f6e64ae4fc2713cedcbf67dfe0200c8f2f7afe545d59fbf

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entitySouth Coast Pediatrics

Victim entitySouth Coast Pediatrics

Incidentdiscovered Jun 12, 2025

Stated responseTook steps to contain the threat

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov