HackingStolen CredentialsCustomer Data InvolvedSupply Chain (3P Vendor)IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICHighContained
AltaMed Health Services Corporation
bd_9a11e96fb50bd9bf · schema v1 · pii pii-v1
Full breach record for AltaMed Health Services Corporation →AltaMed Health Services Corporation reported a data breach involving its business associate, Sharecare Health Data Services (SHDS). An unauthorized third party accessed SHDS's network between May 21, 2018, and June 22, 2018, compromising patient information including names, addresses, dates of birth, and medical record numbers. AltaMed notified 5,767 California residents in February 2019.
California clockDiscovered Jun 22, 2018 → Notified Feb 15, 2019238d ✗ CA 60-day late34 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_167b95d06427d66dHHS OCRfiled 2019-02-15Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-144769
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 15, 2019
- Raw hash
- 22262178bd8f9bb2118c33d991500e6d7176f99031cc188dc30a4ad16830689f
Reporting entity
- Name
- AltaMed Health Services Corporationnorm: altamed health
Victim entity
- Name
- AltaMed Health Services Corporationnorm: altamed health
Incident
- Discovered
- Jun 22, 2018
- Materiality determined
- —
- Notification sent
- Feb 15, 2019
- Affected individuals
- 5,767
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Submitted Notification of Data Breach to California Attorney General Xavier Becerra
- Third party
- via Sharecare Health Data Servicesbusiness associate
- Initial access
- trusted_relationship
Compliance
- Time to disclose
- 34 weeks(238 days from discovery to filing)
- Compliance flags
- CA 60-day late · 238d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 22, 2018→ Notified: Feb 15, 2019238d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.