HackingVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
AltaMed Health Services Corporation
bd_80e321317c99d13c · schema v1 · pii pii-v1
Full breach record for AltaMed Health Services Corporation →AltaMed Health Services reported a data breach involving a third-party software vulnerability in Progress Software's MOVEit Transfer. An unauthorized third party accessed a server on May 29-30, 2023, and downloaded data including names, Social Security numbers, dates of birth, addresses, and gender. The vulnerability was disclosed by Progress on May 31, 2023. AltaMed patched servers, investigated the incident, and is offering 24 months of identity monitoring through Kroll to affected individuals.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_f20b0d4b99035379California State AGfiled 2023-06-29(36d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-571344
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 4, 2023
- Raw hash
- 7d1da510390cdf98cb2738c9a134019e6c1c858fe70658853db84a501efcd5a1
Reporting entity
- Name
- AltaMed Health Services Corporationnorm: altamed health
Victim entity
- Name
- AltaMed Health Services Corporationnorm: altamed health
Incident
- Discovered
- May 31, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Third party
- via Progress Software
- Initial access
- supply_chain
Compliance
- Time to disclose
- 9 weeks(65 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.