Summit Pathology, a Colorado general partnership and Summit Pathology Laboratories, Inc. a Colorado corporation
bd_8ef0ca3e1627a44f · schema v1 · pii pii-v1
Full breach record for Summit Pathology, a Colorado general partnership and Summit Pathology Laboratories, Inc. a Colorado corporation →Summit Pathology disclosed a data breach on October 18, 2024, affecting individuals whose demographic and healthcare information was accessed by an unauthorized cybercriminal. The incident was discovered on April 18, 2024, when suspicious activity was identified. Affected data includes names, addresses, dates of birth, Social Security numbers, medical diagnoses, and financial information. Summit Pathology engaged third-party forensic specialists, notified law enforcement, and implemented additional security safeguards. Identity theft protection services are being offered to affected individuals.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-593540
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 18, 2024
- Raw hash
- be3112a78328164855376df6d8e097bfd928e53f516af03f25e8b83fb8aec67c
Reporting entity
- Name
- Summit Pathology, a Colorado general partnership and Summit Pathology Laboratories, Inc. a Colorado corporationnorm: summit pathology a colorado general partnership and summit pathology laboratories inc a colorado
Victim entity
- Name
- Summit Pathology, a Colorado general partnership and Summit Pathology Laboratories, Inc. a Colorado corporationnorm: summit pathology a colorado general partnership and summit pathology laboratories inc a colorado
Incident
- Discovered
- Apr 18, 2024
- Materiality determined
- —
- Notification sent
- Oct 18, 2024
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 26 weeks(183 days from discovery to filing)
- Compliance flags
- CA 60-day late · 183d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 18, 2024→ Notified: Oct 18, 2024183d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.