PhysicalTheftCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICMediumContained
Gardner Family Health Network
bd_9d45b1a3620c6649 · schema v1 · pii pii-v1
Full breach record for Gardner Family Health Network →On February 19, 2019, an unauthorized individual entered the Optometry Records Room at the Gardner St. James Clinic, compromising the records of 5,064 patients. Affected data included names, addresses, dates of birth, medical record IDs, phone numbers, and appointment details. The organization implemented security changes and provided a hotline for affected individuals.
California clockDiscovered Feb 19, 2019 → Notified Mar 28, 201937d ✓ CA 60-day OK15 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5,064 affectedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-147941
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 6, 2019
- Raw hash
- 03b87e668e2ff7b9acc5fd04d6c9a4feeca5e8fbf0f8458d401584c67f3faacc
Reporting entity
- Name
- Gardner Family Health Networknorm: gardner family health network
- Domain
- gfhn.org
Victim entity
- Name
- Gardner Family Health Networknorm: gardner family health network
- Domain
- gfhn.org
Incident
- Discovered
- Feb 19, 2019
- Materiality determined
- —
- Notification sent
- Mar 28, 2019
- Affected individuals
- 5,064
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Threat actor
- External
Compliance
- Time to disclose
- 15 weeks(107 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 37d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 19, 2019→ Notified: Mar 28, 201937d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.