Medical Depot, Inc.
bd_ada46b326a0e68b9 · schema v1 · pii pii-v1
Full breach record for Medical Depot, Inc. →San Jose Medical Supply Co., Inc. disclosed a breach of protected health information (PHI) and personal data (SSN, DOB, address) occurring between August and December 2011. Former employees, officers, and agents of the company unauthorizedly disclosed customer information to third parties (Front Medical Supplies and Living Medical). The breach was discovered in June 2013 by new management following a forensic investigation. The company notified the California Attorney General, HHS, and local media, and took remedial actions including terminating responsible employees and enhancing security protocols.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-42264
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 18, 2013
- Raw hash
- 81d2ecef4de50ed7fe290140473f959c828c8771debd9d6f767b60cdcca83b19
Reporting entity
- Name
- Medical Depot, Inc.norm: medical depot
Victim entity
- Name
- Medical Depot, Inc.norm: medical depot
Incident
- Discovered
- Jun 1, 2013
- Materiality determined
- Jul 17, 2013
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASICPHI
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- Internal
- Regulator citations
- Notified the California Attorney General’s office of this incidentNotified the US Department of Health and Human Services of this incident
- Initial access
- insider_action
Compliance
- Time to disclose
- 7 weeks(47 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.