California Correctional Health Care Services
bd_a30ddf1b0ba50a90 · schema v1 · pii pii-v1
Full breach record for California Correctional Health Care Services →California Correctional Health Care Services (CCHCS) disclosed a data breach involving the unauthorized internal posting of employee seniority lists containing truncated Social Security Numbers (SSNs) and full names. The incident occurred between October 12 and October 24, 2022, when lists were posted on an internal nursing shared drive and a physical bulletin board at the California Health Care Facility. CCHCS discovered the error on October 24, 2022, and immediately removed the lists, replaced them with non-PII identifiers, and mandated privacy training for involved staff. No evidence of misuse was found.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-559342
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 18, 2022
- Raw hash
- ef6eefd06b2ccc8d3bf64f93bbccf099015c2a9ee9d57e695e71b34e6ed0e443
Reporting entity
- Name
- California Correctional Health Care Servicesnorm: california correctional health care
Victim entity
- Name
- California Correctional Health Care Servicesnorm: california correctional health care
Incident
- Discovered
- Oct 24, 2022
- Materiality determined
- —
- Notification sent
- Oct 26, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
Compliance
- Time to disclose
- 25 days(25 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 2d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 24, 2022→ Notified: Oct 26, 20222d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.