AccidentalHealthcareGovernmentHealthcareMisconfigurationPublishing ErrorEmployee Data InvolvedIdentity (basic)Government IDEmploymentMediumResolved

California Correctional Health Care Services

bd_a30ddf1b0ba50a90 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 24, 2022

Filed

Nov 18, 2022

To disclose

25 days

Affected

Not disclosed

Confidence

66%

Full breach record for California Correctional Health Care Services →13 incidents on file

California Correctional Health Care Services (CCHCS) disclosed an incident where employee personal information, including full names and truncated Social Security Numbers (last four digits), was improperly posted on an internal nursing shared drive and a bulletin board at the California Health Care Facility between October 12 and October 24, 2022. The data was used for a Psychiatric Inpatient Program Seniority Listing. Upon discovery on October 24, 2022, CCHCS removed the lists, replaced them with non-PII identifiers, and mandated privacy training for involved staff. The incident is classified as an error involving employee data.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 12 days

discovery → filing · 25 days

Oct 12, 2022

Begins

Oct 24, 2022

Discovered

Nov 18, 2022

Filed

vs. sector median

8 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: California Correctional Health Care Services
norm: california correctional health care

Name: California Correctional Health Care Services
norm: california correctional health care
Industry: HealthcarellmGovernmentllm

Discovered: Oct 24, 2022
Breach occurred: Oct 12, 2022 – Oct 24, 2022
Undetected for: 12 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security number
Attack vector: Unknown

During the incident: Removed the seniority lists containing your truncated SSNs posted at the CHCF Nursing Operations Office as well as on the internal nursing shared drive
Created a new seniority list replacing your truncated social security numbers with non-PII identifier, PERNR#
Deleted and replaced the seniority listing in the internal nursing shared drive with the new seniority listing
Required multiple staff involved in this incident to take mitigation Privacy and Information Security Awareness training
Reviewed and revised procedures and practices to prevent a recurrence of such disclosures
Changes made: Required multiple staff involved in this incident to take mitigation Privacy and Information Security Awareness training
Reviewed and revised procedures and practices to prevent a recurrence of such disclosures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 days(25 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-559342
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 18, 2022
Raw hash: ef6eefd06b2ccc8d3bf64f93bbccf099015c2a9ee9d57e695e71b34e6ed0e443

Reporting entityCalifornia Correctional Health Care Services

Victim entityCalifornia Correctional Health Care Services

Incidentdiscovered Oct 24, 2022

Stated responseRemoved the seniority lists containing your truncated SSNs posted at the CHCF Nursing Operations Office as well as on the internal nursing shared drive

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov