HackingHealthcareHealthcareCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)PHILowActive

ST. JOSEPH HEALTH SYSTEM

bd_7f07c447d4101bcf · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 18, 2013

Filed

Feb 5, 2014

To disclose

7 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

64%

Full breach record for ST. JOSEPH HEALTH SYSTEM →4 incidents on file

St. Joseph Health System experienced a security attack between December 16 and 18, 2013, where hackers gained unauthorized access to one server. The incident potentially affected patients, employees, and beneficiaries, exposing names and possibly addresses. SJHS shut down the server, engaged forensic experts, and is cooperating with the FBI. Identity protection services were offered.

J jump to incidentP pin to compareR raw source

California clockDiscovered Dec 18, 2013 → Notified Feb 4, 201448d ✓ CA 60-day OK7 weeks discovery → filing

Incident timeline

undetected · 2 days

discovery → filing · 7 weeks / 49 days

Dec 16, 2013

Begins

Dec 18, 2013

Discovered

Feb 5, 2014

Filed

vs. sector median

4 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

HHS OCRbd_851038d51f5917672014-02-05Verified
New Hampshire State AGbd_787da8b67b7229572014-02-03 · +2dVerified
Massachusetts State AGbd_900e9b5efcfdb2492014-02-11 · +6dVerified

Name: ST. JOSEPH HEALTH SYSTEM
norm: st joseph health system
Domain: stjosephhealth.org

Name: ST. JOSEPH HEALTH SYSTEM
norm: st joseph health system
Domain: stjosephhealth.org
Industry: Healthcarellm

Discovered: Dec 18, 2013
Breach occurred: Dec 16, 2013 – Dec 18, 2013
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 4, 2014
Affected individuals: Not disclosed
Data types: Identity (basic)PHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Working with the United States Federal Bureau of Investigation

During the incident: Shutting down access to the involved computer on December 18
Hiring national security and computer forensics experts to thoroughly investigate this matter
Working with the United States Federal Bureau of Investigation
Hired AllClear ID to protect your identity for 12 months at no cost to you
Changes made: Taking steps that will prevent this from happening again in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(49 days from discovery to filing)
Compliance flags: CA 60-day OK · 48d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Dec 18, 2013
→ Notified: Feb 4, 2014
48d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Dec 18, 2013 → Notified: Feb 4, 2014	48d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGFeb 3 · first

HHS OCR+2d

California State AG+2d · this page

Massachusetts State AG+8d

Pattern: first filing Feb 3 (NH), last Feb 11 (MA) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-44027
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 5, 2014
Raw hash: 91d84cd9c3713c9091e6a223255ca9732e243ca02cb9460d2c3e46f58a0e3151

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityST. JOSEPH HEALTH SYSTEM

Victim entityST. JOSEPH HEALTH SYSTEM

Incidentdiscovered Dec 18, 2013

Stated responseShutting down access to the involved computer on December 18

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov