AccidentalMisconfigurationEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENTMediumResolved
UC San Diego Health
bd_9a2525ba51b7866d · schema v1 · pii pii-v1
Full breach record for UC San Diego Health →UC San Diego School of Medicine discovered on September 7, 2016, that an electronic file containing personal information of Graduate Medical Education (GME) trainees was accessible on the internet. The file contained names, social security numbers, and internal index numbers. The breach occurred on August 3, 2016. UCSD removed the file immediately and is offering identity theft protection services to affected individuals.
California clockDiscovered Sep 7, 2016 → Notified Sep 15, 20168d ✓ CA 60-day OK15 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-63999
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 22, 2016
- Raw hash
- 687f989972338be590f61d7fd096621feb39dc8e86ece3a4afc0e263be2fa95b
Reporting entity
- Name
- UC San Diego Healthnorm: uc san diego health
- Domain
- health.ucsd.edu
Victim entity
- Name
- UC San Diego Healthnorm: uc san diego health
- Domain
- health.ucsd.edu
Incident
- Discovered
- Sep 7, 2016
- Materiality determined
- —
- Notification sent
- Sep 15, 2016
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Misconfiguration
Compliance
- Time to disclose
- 15 days(15 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 8d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 7, 2016→ Notified: Sep 15, 20168d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.