DisclosureLens
HackingHealthcareHealthcareStolen CredentialsCustomer Data InvolvedData ExfiltratedPHIHealth (basic)Identity (basic)LowContained

University of California Davis Medical Center

bd_870ed6fc4d56b613 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 26, 2014

Filed

Oct 13, 2014

To disclose

17 days

Affected

Not disclosed

Linked

2 filings

Confidence

65%

UC Davis Health System detected unauthorized access to a provider's email account on September 26, 2014. The breach, occurring on September 25, 2014, resulted in potential impermissible access to patient health information contained in emails. No financial, billing, or social security numbers were exposed. Notifications were sent to affected patients on October 3, 2014.

California clockDiscovered Sep 26, 2014 → Notified Oct 3, 20147d ✓ CA 60-day OK17 days discovery → filing

Incident timeline

undetected · 1 days
discovery → filing · 17 days

Sep 25, 2014

Begins

Sep 26, 2014

Discovered

Oct 13, 2014

Filed

vs. sector median

9 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings

View merged incident ↗
HHS OCROct 8 · first
California State AG+5d · this page

Pattern: first filing Oct 8 (CA), last Oct 13 (CA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.