HackingCustomer Data InvolvedData ExfiltratedPHIHEALTH_BASICIDENTITY_BASICLowContained
Bayhealth Medical Center
bd_950fc14168978470 · schema v1 · pii pii-v1
Full breach record for Bayhealth Medical Center →Bayhealth Medical Center experienced unauthorized access to its network between July 27 and July 31, 2024. The organization became aware of suspicious activity on July 31, 2024. The incident involved the acquisition of Protected Health Information (PHI) and other personal data. Forensic specialists were engaged, and federal law enforcement was notified. Credit monitoring services are being offered to affected individuals.
California clockDiscovered Jul 31, 2024 → Notified Feb 3, 2025187d ✗ CA 60-day late27 weeks discovery → filing
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_362157ac2cddd018Montana State AGfiled 2025-02-03Verified
- bd_470d92e7afe21bdeMaine State AGfiled 2025-02-03Candidate
- bd_6d0e5c321460c8b6Delaware State AGfiled 2025-02-03Verified
- bd_79aca51b0000ac77New Hampshire State AGfiled 2025-02-03Verified
Show 2 more filings ↓Show fewer ↑
- bd_a959cc94549ef956Vermont State AGfiled 2025-02-03Verified
- bd_e01aeff7b3ae70e7Delaware State AGfiled 2025-02-03Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-598207
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 3, 2025
- Raw hash
- 6186c50eee440a7975edcb3f1bef2d49b79a878d269cb54a7fe4b3ded5899724
Reporting entity
- Name
- Bayhealth Hospitalnorm: bayhealth hospital
- Domain
- bayhealth.org
Victim entity
- Name
- Bayhealth Medical Centernorm: bayhealth medical center
Incident
- Discovered
- Jul 31, 2024
- Materiality determined
- —
- Notification sent
- Feb 3, 2025
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement
Compliance
- Time to disclose
- 27 weeks(187 days from discovery to filing)
- Compliance flags
- CA 60-day late · 187d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 31, 2024→ Notified: Feb 3, 2025187d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.