HackingStolen CredentialsCustomer Data InvolvedPIIIDENTITY_BASICLowContained
Ambry Genetics Corporation
bd_b498767107b2222b · schema v1 · pii pii-v1
Full breach record for Ambry Genetics Corporation →Ambry Genetics Corporation reported unauthorized access to an employee's email account between January 22-24, 2020. The investigation could not determine if specific information was acquired, but personal information may have been disclosed. The company engaged outside experts, enhanced security measures, provided employee training, and offered free identity monitoring services to affected individuals.
California clockDiscovered Jan 24, 2020 → Notified Jul 24, 2020182d ✗ CA 60-day late12 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_200a26679500fc3aWashington State AGfiled 2020-04-17Candidate
- bd_9b89c7cf75b9ca05Montana State AGfiled 2020-04-17Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-189258
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 17, 2020
- Raw hash
- 428c851c64d4235d59530bd222cfed479854397058b640231d6b61a53fe5d638
Reporting entity
- Name
- Ambry Genetics Corporationnorm: ambry genetics
- Domain
- ambrygen.com
Victim entity
- Name
- Ambry Genetics Corporationnorm: ambry genetics
- Domain
- ambrygen.com
Incident
- Discovered
- Jan 24, 2020
- Materiality determined
- —
- Notification sent
- Jul 24, 2020
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 12 weeks(84 days from discovery to filing)
- Compliance flags
- CA 60-day late · 182d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 24, 2020→ Notified: Jul 24, 2020182d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.