MisusePrivilege AbuseDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIMediumContained
Contra Costa Health Plan
bd_b0f6a059b6d3fbb1 · schema v1 · pii pii-v1
Full breach record for Contra Costa Health Plan →Contra Costa Health Plan notified California AG of a breach involving a contractor who falsified her identity to obtain a utilization management contract starting Dec 1, 2014. The contractor accessed member electronic health records containing PII, SSNs, and medical info. CCHP terminated the contract and conducted a forensic audit finding no evidence of misuse. Affected individuals were offered one year of credit monitoring.
California clockDiscovered May 22, 2018 → Notified Dec 10, 2018202d ✗ CA 60-day late29 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_7fcfe093a83931b6HHS OCRfiled 2018-12-13Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-142655
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 13, 2018
- Raw hash
- 0587f01dd9bbfac3255a1c4a55ad4f9597e9cb265c61c55321295a0604b5c026
Reporting entity
- Name
- Contra Costa Health Plannorm: contra costa health plan
Victim entity
- Name
- Contra Costa Health Plannorm: contra costa health plan
Incident
- Discovered
- May 22, 2018
- Materiality determined
- Dec 10, 2018
- Notification sent
- Dec 10, 2018
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- Internal
- Regulator citations
- Contacted California’s Department of Health Care Services
- Initial access
- insider_action
Compliance
- Time to disclose
- 29 weeks(205 days from discovery to filing)
- Compliance flags
- CA 60-day late · 202d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 22, 2018→ Notified: Dec 10, 2018202d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.