Social EngineeringPhishingCustomer Data InvolvedPHIIDENTITY_BASICHEALTH_BASICLowContained
Valley Mountain Regional Center
bd_8d15ece8068efd0b · schema v1 · pii pii-v1
Full breach record for Valley Mountain Regional Center →Valley Mountain Regional Center detected a malicious phishing email on September 15, 2021, which compromised 14 email accounts. The incident potentially exposed protected health information (PHI) including names, addresses, dates of birth, UCI numbers, and medical diagnoses for clients served by the regional center. The organization removed the phishing email, investigated the compromised accounts, and notified affected individuals.
California clockDiscovered Sep 15, 2021 → Notified Nov 5, 202151d ✓ CA 60-day OK8 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-547380
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 9, 2021
- Raw hash
- f3a2467a042faf1546fee01ff393da01953a1f6b4afa7aba6e2a1f00582c78ab
Reporting entity
- Name
- Valley Mountain Regional Centernorm: valley mountain regional center
- Domain
- vmrc.net
Victim entity
- Name
- Valley Mountain Regional Centernorm: valley mountain regional center
- Domain
- vmrc.net
Incident
- Discovered
- Sep 15, 2021
- Materiality determined
- —
- Notification sent
- Nov 5, 2021
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Regulator citations
- Filed breach notification with California Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 8 weeks(55 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 51d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 15, 2021→ Notified: Nov 5, 202151d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.