HackingHealthcareHealthcareStolen CredentialsSupply Chain (3P Vendor)Employee Data InvolvedIdentity (basic)Government IDMediumContained

NorthBay Healthcare Corporation

bd_a06f7bb68e600bf3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 3, 2018

Filed

Oct 30, 2018

To disclose

27 days

Affected

Not disclosed

Confidence

64%

Full breach record for NorthBay Healthcare Corporation →5 incidents on file

NorthBay Healthcare Corporation notified individuals that an unauthorized individual accessed applicant information via third-party vendor Jobscience, Inc. The incident affected applicants who applied between December 2012 and May 2018. Exposed data included names, addresses, dates of birth, email addresses, Social Security numbers, and alien registration numbers. NorthBay offered one year of complimentary identity protection services.

J jump to incidentP pin to compareR raw source

California clockDiscovered Oct 3, 2018 → Notified Oct 25, 201822d ✓ CA 60-day OK27 days discovery → filing

Incident timeline

undetected · 148 days

discovery → filing · 27 days

May 8, 2018

Begins

Oct 3, 2018

Discovered

Oct 30, 2018

Filed

vs. sector median

9 wks faster

Part of JobScience supply-chain incident (2018) — a supply-chain cascade affecting multiple organizations.View cascade →

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: NorthBay Healthcare Corporation
norm: northbay healthcare

Name: NorthBay Healthcare Corporation
norm: northbay healthcare
Industry: Healthcarellm

Discovered: Oct 3, 2018
Breach occurred: May 8, 2018 – May 11, 2018
Undetected for: 148 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 25, 2018
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Date of birth
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Third party: via Jobscience, Inc.
Initial access: supply_chain

During the incident: Working with Jobscience, Inc. to take steps to prevent a similar incident from occurring in the future
Taking remedial security steps, such as forcing password resets
Offering a complimentary one-year membership to Experian’s IdentityWorks Credit 3B
Changes made: Forcing password resets
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 days(27 days from discovery to filing)
Compliance flags: CA 60-day OK · 22d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Oct 3, 2018
→ Notified: Oct 25, 2018
22d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Oct 3, 2018 → Notified: Oct 25, 2018	22d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-141282
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 30, 2018
Raw hash: c0b56f3e6bc841d8ed9153d98828b0166291eded545c265ac090b4ffa4a61b89

Reporting entityNorthBay Healthcare Corporation

Victim entityNorthBay Healthcare Corporation

Incidentdiscovered Oct 3, 2018

Stated responseWorking with Jobscience, Inc. to take steps to prevent a similar incident from occurring in the future

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov