HackingCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowContained
Valley Radiology
bd_7d1cc52a7503a657 · schema v1 · pii pii-v1
Full breach record for Valley Radiology →Valley Radiology Consultants Medical Group Inc detected suspicious activity on its computer systems on September 15, 2025. An unauthorized actor accessed certain files, including patient files. The breach date listed by the CA AG is September 12, 2025. The organization secured systems, engaged a third-party cybersecurity firm, disconnected network access, and changed passwords. Affected individuals are offered 12 months of credit monitoring and fraud assistance.
California clockDiscovered Sep 15, 2025 → Notified Feb 26, 2026164d ✗ CA 60-day late23 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-619521
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 26, 2026
- Raw hash
- a66f1ffb7726b556063ba533b1415e577135ce3372c5ea088c29d993df767473
Reporting entity
- Name
- Valley Radiologynorm: valley radiology
Victim entity
- Name
- Valley Radiologynorm: valley radiology
Incident
- Discovered
- Sep 15, 2025
- Materiality determined
- —
- Notification sent
- Feb 26, 2026
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed notification with California Attorney General
Compliance
- Time to disclose
- 23 weeks(164 days from discovery to filing)
- Compliance flags
- CA 60-day late · 164dCA AG copy ≤15d · 0d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 15, 2025→ Notified: Feb 26, 2026164d 60 days (analyst band, pre-2026 discoveries) CA 60-day late California Consumers notified: Feb 26, 2026→ AG copy submitted: Feb 26, 20260d 15 calendar days CA AG copy ≤15d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.