PhysicalHealthcareHealthcareTheftCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Health (basic)MinorMediumResolved

Inland Empire Health Plan (IEHP)

bd_7c243a03e5d51fc7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jan 9, 2015

To disclose

—

Affected

Not disclosed

Confidence

64%

Full breach record for Inland Empire Health Plan (IEHP) →

Inland Empire Health Plan (IEHP) notified members that a desktop computer containing member data was stolen from a local provider, Children's Eyewear Sight, on October 28, 2014. The stolen file contained names, dates of birth, addresses, phone numbers, email addresses, IEHP Member ID numbers, appointment dates, purchase dates, and prescribing doctor names. Social Security numbers were not included. IEHP reported the incident to DHCS, HHS, and the CA OAG, and offered confidentiality alerts to affected members.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 28, 2014

Begins

Jan 9, 2015

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Inland Empire Health Plan (IEHP)
norm: inland empire health plan iehp

Name: Inland Empire Health Plan (IEHP)
norm: inland empire health plan iehp
Industry: Healthcarellm

Discovered: —
Breach occurred: Oct 28, 2014
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Health (basic)Minor
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External
Regulator citations: Reported to Department of Health Care Services (DHCS)Reported to Department of Health and Human Services (DHHS)Reported to California Office of Attorney General (OAG)
Third party: via Children's Eyewear Sight

During the incident: Reported this incident to the Department of Health Care Services (DHCS)
Reported this incident to the Department of Health and Human Services (DHHS)
Reported this incident to the California Office of Attorney General (OAG)
Reported this incident to local media
Offered the option of applying a confidentiality alert to the electronic record maintained by IEHP
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-47991
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 9, 2015
Raw hash: e6afbc115a8d3ab2c44ee19fb65aee84cc7f13fa3927466211a6c97ccd176233

Reporting entityInland Empire Health Plan (IEHP)

Victim entityInland Empire Health Plan (IEHP)

IncidentUnknown

Stated responseReported this incident to the Department of Health Care Services (DHCS)

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov