AccidentalHealthcareHealthcareMisdeliveryCustomer Data InvolvedIdentity (basic)Health (basic)LowResolved

CalOptima

bd_8ddc45d3ab2ffd35 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Oct 27, 2021

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for CalOptima →3 incidents on file

CalOptima disclosed that between August 4 and August 19, 2021, COVID-19 Vaccine Health Reward Approval letters and gift cards were mailed to incorrect addresses due to a failure to match member names with addresses. The exposed information included first and last name, health plan name, and vaccination status. No SSNs or financial data were involved. CalOptima contacted recipients of erroneous letters, re-mailed correct letters, and implemented a secondary address verification step in their mailing process.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 4, 2021

Begins

Oct 27, 2021

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: CalOptima
norm: caloptima
Domain: caloptima.org

Name: CalOptima
norm: caloptima
Domain: caloptima.org
Industry: Healthcarellm

Discovered: —
Breach occurred: Aug 4, 2021 – Aug 19, 2021
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Health (basic)
Attack vector: Unknown

During the incident: Contact the person who received your letter in error and will ask them to return it or properly dispose of it
Re-mailed a new COVID-19 Vaccine Health Reward Approval letter to affected members once addresses have been corrected
Changes made: Adding a step in our mailing process requiring member mailing addresses to be checked a second time to prevent this error from happening again
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-546955
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 27, 2021
Raw hash: e0f6f6d923452cc04b9e773606bae9325e7ad1def45db9df58e7828badd90b3a

Reporting entityCalOptima

Victim entityCalOptima

IncidentUnknown

Stated responseContact the person who received your letter in error and will ask them to return it or properly dispose of it

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov