AccidentalMisdeliveryCustomer Data InvolvedPIIPHIIDENTITY_BASICLowResolved
CalOptima
bd_8ddc45d3ab2ffd35 · schema v1 · pii pii-v1
Full breach record for CalOptima →CalOptima experienced a misdelivery error involving COVID-19 Vaccine Health Reward letters mailed between August 4 and 19, 2021. Incorrect member addresses were matched with names, exposing names, health plan names, and vaccination status. No SSN or financial data was involved. CalOptima is remailing correct letters and adding a secondary address check.
California clockDiscovered Aug 10, 2021 → Notified Aug 31, 202121d ✓ CA 60-day OK11 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-546955
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 27, 2021
- Raw hash
- e0f6f6d923452cc04b9e773606bae9325e7ad1def45db9df58e7828badd90b3a
Reporting entity
- Name
- CalOptimanorm: caloptima
- Domain
- caloptima.org
Victim entity
- Name
- CalOptimanorm: caloptima
- Domain
- caloptima.org
Incident
- Discovered
- Aug 10, 2021
- Materiality determined
- —
- Notification sent
- Aug 31, 2021
- Affected individuals
- Not disclosed
- Data types
- PIIPHIIDENTITY_BASIC
- Attack vector
- Unknown
- Regulator citations
- DHCS Approved 08.30.2021
Compliance
- Time to disclose
- 11 weeks(78 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 21d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Aug 10, 2021→ Notified: Aug 31, 202121d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.