PhysicalHealthcareHealthcareTheftCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumResolved

Stanislaus Surgical Hospital

bd_a5f5969d363341e9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 5, 2015

Filed

May 6, 2015

To disclose

4 weeks

Affected

1state residents only

Linked

3 filings

Confidence

64%

Full breach record for Stanislaus Surgical Hospital →

Stanislaus Surgical Hospital issued a supplemental notification regarding a physical break-in at its Modesto, CA facility on April 5, 2015. Stolen items included a computer, CDs, and binders containing patient and employee PII (names, SSNs, DOBs, bank/routing numbers). The incident was reported to the Modesto Police Department. The hospital implemented enhanced physical security measures and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 4 weeks / 31 days

Apr 5, 2015

Begins

Apr 5, 2015

Discovered

May 6, 2015

Filed

vs. sector median

7 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

California State AGbd_80f14957a94a28c92015-04-13 · +23dVerified
HHS OCRbd_6257aedd4364ea7e2015-06-04 · +29dVerified

Name: Stanislaus Surgical Hospital
norm: stanislaus surgical hospital
Domain: stanislaussurgical.com

Name: Stanislaus Surgical Hospital
norm: stanislaus surgical hospital
Domain: stanislaussurgical.com
Industry: Healthcarellm

Discovered: Apr 5, 2015
Breach occurred: Apr 5, 2015
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 9, 2015
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: reported to the Modesto Police Department

During the incident: The break-in and theft were immediately reported to the Modesto Police Department
Working with our legal counsel to ensure all appropriate steps and notifications are being followed
Implemented enhanced security measures to reduce the risk of future occurrences, such as installing additional security cameras and alarms, replacing all locks, increasing on-site security checks, and storing back-up payroll files in a secured, locked caged area in a different building
Offering a complimentary one-year membership of Experian's ProtectMyID Elite
Changes made: Installing additional security cameras and alarms
Replacing all locks
Increasing on-site security checks
Storing back-up payroll files in a secured, locked caged area in a different building
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 2 states

View merged incident ↗

California State AGApr 13 · first

Montana State AG+23d · this page

HHS OCR+52d

Pattern: first filing Apr 13 (CA), last Jun 4 (CA) — a 52-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Stanislaus-Surgical-Hospital.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 6, 2015
Raw hash: cd73edbcf001052f6ec2a7e9ebb546019dc0e8c0fd1a688e63e331ca4b29c61c

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityStanislaus Surgical Hospital

Victim entityStanislaus Surgical Hospital

Incidentdiscovered Apr 5, 2015

Stated responseThe break-in and theft were immediately reported to the Modesto Police Department

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov