Newport Harbor Pathology Medical Group, Inc.
bd_9c8074bcbc178f48 · schema v1 · pii pii-v1
Full breach record for Newport Harbor Pathology Medical Group, Inc. →Newport Harbor Pathology Medical Group, Inc. (NHPMG) notified individuals of a security incident where an unauthorized actor potentially viewed and copied personal and health information between October 8, 2024, and November 11, 2024. NHPMG became aware of the activity on November 11, 2024. Affected data includes names, SSNs, DOBs, addresses, diagnoses, pathology test results, medical record numbers, driver's license numbers, and health insurance information. The organization engaged third-party cybersecurity specialists, secured the environment, and is offering 12 months of credit monitoring and identity restoration services.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-601272
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 10, 2025
- Raw hash
- d4a1dc66571b5a25e4b1548a657c19649f1770b78b6eca554385c960d386696a
Reporting entity
- Name
- Newport Harbor Pathology Medical Group, Inc.norm: newport harbor pathology medical
Victim entity
- Name
- Newport Harbor Pathology Medical Group, Inc.norm: newport harbor pathology medical
Incident
- Discovered
- Nov 11, 2024
- Materiality determined
- —
- Notification sent
- Mar 28, 2025
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASICFINANCIAL
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified government regulators where required
Compliance
- Time to disclose
- 21 weeks(150 days from discovery to filing)
- Compliance flags
- CA 60-day late · 137d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 11, 2024→ Notified: Mar 28, 2025137d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.