MalwareHealthcareTechnologyHealthcareRansomwareCapture Stored DataRansom DemandedData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)Business Associate (HIPAA)Identity (basic)PIILowContained

Shasta Community Health Center

bd_aefa377a9796e6a8 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

May 26, 2023

To disclose

—

Affected

Not disclosed

Confidence

84%

Full breach record for Shasta Community Health Center →2 incidents on file

On March 9, 2023, Alvaria, Inc., a workforce management and call center technology company, suffered a ransomware attack on its customer environment. Data associated with Shasta Community Health Center customers was accessed and exfiltrated, potentially including names, phone numbers, addresses, and healthcare provider names. Alvaria secured its networks, restored systems via backups, engaged forensic experts, and notified the FBI. Affected individuals were offered 24 months of complimentary Experian identity monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Mar 9, 2023

Begins

May 26, 2023

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

A leak claim by hive about this victim predates this filing by 155 days.View originating leak claim

Name: Shasta Community Health Center
norm: shasta community health center
Domain: shastahealth.org

Name: Shasta Community Health Center
norm: shasta community health center
Domain: shastahealth.org
Industry: HealthcarellmTechnologyllm

Discovered: —
Breach occurred: Mar 9, 2023
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)PII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified California Attorney General
Third party: via Alvaria, Inc.

During the incident: Immediately secured our networks
Safely restored our systems and operations via viable backups
Initiated an investigation of the incident with the assistance of forensic experts
Notified the Federal Bureau of Investigation ("FBI")
Notifying affected individuals so that they may take further steps to protect their information
Providing access to 24 months of credit monitoring and identity restoration services through Experian at no charge
Changes made: Implemented measures to further improve the security of our systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-567290
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 26, 2023
Raw hash: 54efe66920eb4c37db1bdf024a1107470627d0212965073f765133cab835ee84

Reporting entityShasta Community Health Center

Victim entityShasta Community Health Center

IncidentRansomware

Stated responseImmediately secured our networks

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov