MalwareRansomwareCustomer Data InvolvedData EncryptedPHIHEALTH_BASICIDENTITY_BASICLowActive
National Capital Poison Center (“NCPC”)
bd_82528aea2f34c643 · schema v1 · pii pii-v1
Full breach record for National Capital Poison Center (“NCPC”) →National Capital Poison Center (NCPC) experienced a ransomware infection in October 2017. Unauthorized access to a database server occurred on October 21, 2017. The database contained caller information including names, dates of birth, addresses, phone numbers, email addresses, and clinical information. NCPC launched an investigation with third-party forensic investigators and is monitoring systems. Notice was sent on December 8, 2017.
California clockDiscovered Oct 1, 2017 → Notified Dec 8, 201768d ✗ CA 60-day late10 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-130874
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 8, 2017
- Raw hash
- 3a8a16ef5710828824651633d66856167ad62be1744c825a53fd801dccefbb10
Reporting entity
- Name
- National Capital Poison Center (“NCPC”)norm: national capital poison center ncpc
- Domain
- poison.org
Victim entity
- Name
- National Capital Poison Center (“NCPC”)norm: national capital poison center ncpc
- Domain
- poison.org
Incident
- Discovered
- Oct 1, 2017
- Materiality determined
- —
- Notification sent
- Dec 8, 2017
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- External
- Regulator citations
- Issued notice of this incident to certain state and foreign regulators
Compliance
- Time to disclose
- 10 weeks(68 days from discovery to filing)
- Compliance flags
- CA 60-day late · 68d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 1, 2017→ Notified: Dec 8, 201768d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.