HackingStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICPHIHEALTH_BASICLowContained
Pacific Imaging Management, LLC
bd_800a06511057947c · schema v1 · pii pii-v1
Full breach record for Pacific Imaging Management, LLC →Radiology Associates of San Luis Obispo (Pacific Imaging Management, LLC) notified the California AG of unauthorized access to employee email accounts between Feb 3 and Mar 17, 2025. The organization became aware of unusual activity on Mar 13, 2025. Affected data includes names and potentially protected health information. The company changed passwords, reviewed policies, and offered credit monitoring.
California clockDiscovered Mar 13, 2025 → Notified Sep 10, 2025181d ✗ CA 60-day late26 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-608403
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 10, 2025
- Raw hash
- 6334802717e42f1a35f08d3af158fd97dbd15ba6a437a9127132c47564556c6b
Reporting entity
- Name
- Pacific Imaging Management, LLCnorm: pacific imaging management
Victim entity
- Name
- Pacific Imaging Management, LLCnorm: pacific imaging management
Incident
- Discovered
- Mar 13, 2025
- Materiality determined
- —
- Notification sent
- Sep 10, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPHIHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 26 weeks(181 days from discovery to filing)
- Compliance flags
- CA 60-day late · 181d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 13, 2025→ Notified: Sep 10, 2025181d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.