HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)PHIHEALTH_BASICIDENTITY_BASICLowContained
Jaime Schwartz MD, PC
bd_89268db6540172a6 · schema v1 · pii pii-v1
Full breach record for Jaime Schwartz MD, PC →Jaime Schwartz MD, PC notified patients of a data breach discovered on June 27, 2024. An unauthorized third party used a vendor's credentials to access the practice's medical billing system, resulting in the exfiltration of personal and medical information including names, addresses, dates of birth, medical records, and prescription details. SSNs and financial data were not impacted. The firm engaged forensic investigators and is offering 12 months of credit monitoring.
California clockDiscovered Jun 27, 2024 → Notified Jan 15, 2025202d ✗ CA 60-day late35 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_c30efd5dbd899d9cMontana State AGfiled 2025-03-04(5d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-599198
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 27, 2025
- Raw hash
- 2479bb67021236fb46fca5fde4135ba5ac4e3b807709aaad669cc55fd1ca0e64
Reporting entity
- Name
- Jaime Schwartz MD, PCnorm: jaime schwartz md
Victim entity
- Name
- Jaime Schwartz MD, PCnorm: jaime schwartz md
Incident
- Discovered
- Jun 27, 2024
- Materiality determined
- —
- Notification sent
- Jan 15, 2025
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Initial access
- trusted_relationship
Compliance
- Time to disclose
- 35 weeks(245 days from discovery to filing)
- Compliance flags
- CA 60-day late · 202d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 27, 2024→ Notified: Jan 15, 2025202d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.