MisusePrivilege AbuseDelayed DiscoveryEmployee Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowActive
University of California Irvine Medical Center
bd_85c1d964b54f4f73 · schema v1 · pii pii-v1
Full breach record for University of California Irvine Medical Center →UC Irvine Medical Center disclosed an insider breach where an employee accessed patient records without a job-related purpose between June 2011 and March 2015. The incident involved PHI and basic identity data. The employee was removed, law enforcement was notified, and credit monitoring was offered. No SSN or financial data was accessed.
California clockDiscovered Mar 13, 2015 → Notified Jun 17, 201596d ✗ CA 60-day late14 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-56428
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 17, 2015
- Raw hash
- c422e296dc49678cb6cab3a82cb1345697d890199e59b640b117b0488c7563aa
Reporting entity
- Name
- University of California Irvine Medical Centernorm: university of california irvine medical center
- Domain
- ucihealth.org
Victim entity
- Name
- University of California Irvine Medical Centernorm: university of california irvine medical center
- Domain
- ucihealth.org
Incident
- Discovered
- Mar 13, 2015
- Materiality determined
- —
- Notification sent
- Jun 17, 2015
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Insider
- MITRE ATT&CK
- T1530 Data from Cloud Storage Object
- Threat actor
- Internal
- Initial access
- insider_action
Compliance
- Time to disclose
- 14 weeks(96 days from discovery to filing)
- Compliance flags
- CA 60-day late · 96d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 13, 2015→ Notified: Jun 17, 201596d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.