HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICPIILowContained
Pandemic Response Lab
bd_7da8695a5adf5cc0 · schema v1 · pii pii-v1
Full breach record for Pandemic Response Lab →Pandemic Response Lab (PRL) disclosed a data security incident involving a document containing patient personal information (name, email, address, DOB) accessible via an unauthorized link. The breach occurred between September 6, 2021, and March 2, 2022. PRL restricted access and enhanced privacy safeguards. No financial or health data was compromised. Notification was sent to affected individuals.
California clockDiscovered Mar 2, 2022 → Notified Jun 24, 2022114d ✗ CA 60-day late16 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-554585
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 24, 2022
- Raw hash
- fa58c743b4864d662c7060de3852dd548ba0a65685d1982f5e50b899c3fd88bc
Reporting entity
- Name
- Pandemic Response Labnorm: pandemic response lab
Victim entity
- Name
- Pandemic Response Labnorm: pandemic response lab
Incident
- Discovered
- Mar 2, 2022
- Materiality determined
- —
- Notification sent
- Jun 24, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1530 Data from Cloud Storage Object
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 16 weeks(114 days from discovery to filing)
- Compliance flags
- CA 60-day late · 114d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 2, 2022→ Notified: Jun 24, 2022114d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.