HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICPHIHEALTH_BASICLowContained
Native American Health Center
bd_afc04eac2fa6b588 · schema v1 · pii pii-v1
Full breach record for Native American Health Center →Native American Health Center (NAHC) notified individuals of a data security incident where unauthorized access occurred between November 1 and November 19, 2023. NAHC discovered the incident on November 19, 2023, and immediately disconnected network access. A forensic investigation concluded in January 2024 that files were accessed by an unauthorized actor. Affected data includes names, dates of birth, and medical information (PHI). Social Security numbers were not impacted. NAHC replaced hard drives, enhanced MFA, and offered 12 months of credit monitoring.
California clockDiscovered Nov 19, 2023 → Notified Jun 3, 2024197d ✗ CA 60-day late28 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-586282
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 3, 2024
- Raw hash
- 6432c5845099fb93002f5d741b9e36968f1b223998a9fce0eed23dde628a1ccc
Reporting entity
- Name
- Native American Health Centernorm: native american health center
Victim entity
- Name
- Native American Health Centernorm: native american health center
Incident
- Discovered
- Nov 19, 2023
- Materiality determined
- —
- Notification sent
- Jun 3, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPHIHEALTH_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 28 weeks(197 days from discovery to filing)
- Compliance flags
- CA 60-day late · 197d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 19, 2023→ Notified: Jun 3, 2024197d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.