HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICHEALTH_BASICMediumContained
Prominence Health Plan
bd_90ba934885c52040 · schema v1 · pii pii-v1
Full breach record for Prominence Health Plan →Prominence Health Plan notified California AG of a data breach affecting ~45,000 members. Unauthorized access occurred in Nov 2020, discovered Apr 2021. Accessed data included call recordings and claim forms containing names, DOBs, member IDs, and addresses. No SSNs or financial data accessed. FBI and regulators notified. Credit monitoring offered.
California clockDiscovered Apr 22, 2021 → Notified Jun 21, 202160d ✓ CA 60-day OK8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_9c223d1e0ebe27eeMontana State AGfiled 2021-06-18Candidate
- bd_da30b44faac0a809Maine State AGfiled 2021-06-18Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-542006
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 18, 2021
- Raw hash
- 2b52c7d01586d6b967c00823b550dd54690588f94e1ce2bf2f2cdfe2ee3e4c3c
Reporting entity
- Name
- Prominence Health Plannorm: prominence health plan
Victim entity
- Name
- Prominence Health Plannorm: prominence health plan
Incident
- Discovered
- Apr 22, 2021
- Materiality determined
- —
- Notification sent
- Jun 21, 2021
- Affected individuals
- 45,000
- Data types
- IDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- reported the incident to the FBIreported the incident to federal and state regulators
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(57 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 60d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 22, 2021→ Notified: Jun 21, 202160d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.