AccidentalMisdeliveryCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
Touchstone Medical Imaging, LLC
bd_aacf0a6c860e5fa1 · schema v1 · pii pii-v1
Full breach record for Touchstone Medical Imaging, LLC →Touchstone Medical Imaging, LLC disclosed a data breach affecting patient billing records. A seldom-used folder containing patient information (names, DOB, SSN, address, insurer, radiology procedures) was inadvertently left accessible via the internet from before August 2012 until May 9, 2014. The folder was secured, and notifications were sent offering one year of credit monitoring.
California clockDiscovered May 9, 2014 → Notified Sep 30, 2014144d ✗ CA 60-day late21 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_580aca34fd5e36f7HHS OCRfiled 2014-10-03Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-46850
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 3, 2014
- Raw hash
- 9ba1a1c687bbbdc0d5907856602f70c37f9d369e6bfc899bbf2fd6a7151be9c3
Reporting entity
- Name
- Touchstone Medical Imaging, LLCnorm: touchstone medical imaging
Victim entity
- Name
- Touchstone Medical Imaging, LLCnorm: touchstone medical imaging
Incident
- Discovered
- May 9, 2014
- Materiality determined
- Sep 30, 2014
- Notification sent
- Sep 30, 2014
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
Compliance
- Time to disclose
- 21 weeks(147 days from discovery to filing)
- Compliance flags
- CA 60-day late · 144d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 9, 2014→ Notified: Sep 30, 2014144d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.