DisclosureLens
HackingHealthcareHealthcareCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountFinancial credentialsPHIHealth (basic)BiometricCredentialsMediumContained

NorthBay Healthcare Corporation

bd_84b37cb0f778512b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 23, 2024

Filed

Jan 29, 2025

To disclose

49 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

65%
Full breach record for NorthBay Healthcare Corporation5 incidents on file

NorthBay Healthcare Corporation disclosed that an unauthorized third party gained access to certain files on its computer systems between January 11, 2024, and April 1, 2024. The organization identified suspicious activity on February 23, 2024, and engaged a forensic security firm and law enforcement. Affected data may include names, dates of birth, Social Security numbers, passport numbers, financial account numbers, medical information, biometric information, health insurance information, driver's license numbers, usernames, passwords, and credit/debit card details. The company is offering one year of complimentary credit monitoring through Experian IdentityWorks.

Incident timeline

undetected · 43 days
discovery → filing · 49 weeks / 341 days

Jan 11, 2024

Begins

Feb 23, 2024

Discovered

Jan 29, 2025

Filed

vs. sector median

+36 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Show 2 more filings

Filing propagation · 7 filings · 7 states

View merged incident ↗
Massachusetts State AGJan 29 · first
Oregon State AGJan 29 · first
Maine State AGJan 29 · first
Nebraska State AGJan 29 · first
Vermont State AGJan 29 · first
Montana State AGJan 29 · first
California State AGJan 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.