PhysicalHealthcareHealthcareTheftCustomer Data InvolvedPHIHealth (basic)Identity (basic)MediumContained

Milligan Chiropractic Group

bd_a5edfdbb0caa58b9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 31, 2018

Filed

Mar 30, 2018

To disclose

8 weeks

Affected

2,584state residents only

Linked

2 filings

Confidence

66%

Full breach record for Milligan Chiropractic Group →

Milligan Chiropractic Group, Inc. d/b/a Del Mar Chiropractic Sports Group reported the theft of an employee's laptop on January 31, 2018. The incident potentially affected 2,584 California residents. Exposed data included names, dates of birth, and clinic/progress notes (PHI). No SSNs or financial data were involved. The organization implemented enhanced electronic safeguards, secure cloud storage, and employee training.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jan 31, 2018 → Notified Mar 30, 201858d ✓ CA 60-day OK8 weeks discovery → filing

Incident timeline

discovery → filing · 8 weeks / 58 days

Jan 31, 2018

Begins

Jan 31, 2018

Discovered

Mar 30, 2018

Filed

vs. sector median

4 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_5a584d70880387612018-03-30Verified

Name: Milligan Chiropractic Group, Inc. d/b/a Del Mar Chiropractic Sports Group
norm: milligan chiropractic group
Domain: wilsonelser.com

Name: Milligan Chiropractic Group
norm: milligan chiropractic
Also named: Milligan Chiropractic Group, Inc.dba oflegal entity
Del Mar Chiropractic Sports Groupdba oftrade name
Industry: Healthcarellm

Discovered: Jan 31, 2018
Breach occurred: Jan 31, 2018
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 30, 2018
Affected individuals: 2,584state-resident count only
Data types: PHIHealth (basic)Identity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Regulator citations: Notified California Attorney General

During the incident: Conducted an investigation to determine what information may have been stored on the laptop
Mailed notification letters to affected individuals
Changes made: Implemented increased electronic safeguards
Migrated to secure and HIPAA compliant cloud storage
Reviewed current physical policies and procedures to ensure the secure storage of personal information
Trained employees regarding existing and additional safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(58 days from discovery to filing)
Compliance flags: CA 60-day OK · 58d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jan 31, 2018
→ Notified: Mar 30, 2018
58d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jan 31, 2018 → Notified: Mar 30, 2018	58d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

HHS OCRMar 30 · first

California State AGMar 30 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-134927
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 30, 2018
Raw hash: 09d26e0c808d20cd526fed05221417364402e3e59d82eeb1d434cc157c308cfc

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityMilligan Chiropractic Group, Inc. d/b/a Del Mar Chiropractic Sports Group

Victim entityMilligan Chiropractic Group

Incidentdiscovered Jan 31, 2018

Stated responseConducted an investigation to determine what information may have been stored on the laptop

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov