PhysicalHealthcareHealthcareTheftCustomer Data InvolvedPHIHealth (basic)Government IDIdentity (basic)MediumResolved

UCSF Family Medicine Center at Lakeshore

bd_b35417be4da03f04 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 13, 2014

Filed

Mar 12, 2014

To disclose

8 weeks

Affected

Not disclosed

Confidence

66%

Full breach record for UCSF Family Medicine Center at Lakeshore →2 incidents on file

UCSF Family Medicine Center at Lakeshore reported the theft of unencrypted desktop computers from its facility on January 11, 2014. The incident was discovered on January 13, 2014. The stolen devices contained protected health information, including names, medical record numbers, and potentially social security numbers, dates of birth, and addresses. UCSF engaged ID Experts to provide credit monitoring and fraud recovery services to affected individuals and stated it is strengthening information security processes.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 8 weeks / 58 days

Jan 11, 2014

Begins

Jan 13, 2014

Discovered

Mar 12, 2014

Filed

vs. sector median

3 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: UCSF Family Medicine Center at Lakeshore
norm: ucsf family medicine center at lakeshore
Domain: ucsfhealth.org

Name: UCSF Family Medicine Center at Lakeshore
norm: ucsf family medicine center at lakeshore
Domain: ucsfhealth.org
Industry: Healthcarellm

Discovered: Jan 13, 2014
Breach occurred: Jan 11, 2014
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PHIHealth (basic)Government IDIdentity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External

During the incident: Began a technical analysis to identify what information was on the computers
Contracted with ID Experts to provide fraud monitoring and recovery services
Changes made: Strengthening educational and operational processes for information security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(58 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-44385
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 12, 2014
Raw hash: ca546a3b18196b8e07e9e060ba605976d139c1c36a616df18faedb087fb6f2c4

Reporting entityUCSF Family Medicine Center at Lakeshore

Victim entityUCSF Family Medicine Center at Lakeshore

Incidentdiscovered Jan 13, 2014

Stated responseBegan a technical analysis to identify what information was on the computers

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov