PhysicalTheftCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowContained
Raley's/Bel Air Mart/Nob Hill General Store, Inc.
bd_828fde29bb609674 · schema v1 · pii pii-v1
Full breach record for Raley's/Bel Air Mart/Nob Hill General Store, Inc. →Raley's/Bel Air Mart/Nob Hill General Store, Inc. reported the theft of a pharmacy laptop on September 24, 2018. The device contained unencrypted electronic files with personal health information (PHI) for pharmacy patients, including names, dates of birth, health plans, medical conditions, and prescription drugs. The data did not contain SSNs, addresses, or credit card numbers. The company notified law enforcement, investigated the incident, and subsequently encrypted all pharmacy laptops.
California clockDiscovered Sep 24, 2018 → Notified Oct 26, 201832d ✓ CA 60-day OK5 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_ae8054ad5dcbcba9HHS OCRfiled 2018-10-26Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-141169
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 26, 2018
- Raw hash
- 2c926eae2572f8a10a4e683c84e4e22bb9af7143abbe6e6819464913cc94b4a3
Reporting entity
- Name
- Raley's/Bel Air Mart/Nob Hill General Store, Inc.norm: raley s bel air mart nob hill general store
Victim entity
- Name
- Raley's/Bel Air Mart/Nob Hill General Store, Inc.norm: raley s bel air mart nob hill general store
Incident
- Discovered
- Sep 24, 2018
- Materiality determined
- —
- Notification sent
- Oct 26, 2018
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Threat actor
- External
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 32d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 24, 2018→ Notified: Oct 26, 201832d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.