HackingCustomer Data InvolvedData ExfiltratedPHIIDENTITY_BASICHEALTH_BASICLowContained
Navvis & Company, LLC
bd_a130e687bb61da4c · schema v1 · pii pii-v1
Full breach record for Navvis & Company, LLC →Navvis & Company, LLC, a health management services provider, experienced unauthorized access to its network between July 12 and July 25, 2023. The incident involved potential exposure of protected health information (PHI), including names, dates of birth, health plan info, and medical records. Navvis secured its network, launched an investigation, and is offering credit monitoring. This is a supplemental notice filed with the California Attorney General.
California clockDiscovered Jul 25, 2023 → Notified Jan 9, 2024168d ✗ CA 60-day late28 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_c1942c40dd4a3a2aNew Hampshire State AGfiled 2024-02-09Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-580801
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 9, 2024
- Raw hash
- 14618fddf72fe651ceaa836913a140574b453ebc288c5ab77515e0c7e616b8eb
Reporting entity
- Name
- Navvis & Company, LLCnorm: navvis
Victim entity
- Name
- Navvis & Company, LLCnorm: navvis
Incident
- Discovered
- Jul 25, 2023
- Materiality determined
- —
- Notification sent
- Jan 9, 2024
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Notified applicable regulatory authorities
Compliance
- Time to disclose
- 28 weeks(199 days from discovery to filing)
- Compliance flags
- CA 60-day late · 168d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 25, 2023→ Notified: Jan 9, 2024168d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.