HackingData ExfiltratedCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowContained
Dignity Health Lassen Medical Clinic
bd_b763680e2e4a373f · schema v1 · pii pii-v1
Full breach record for Dignity Health Lassen Medical Clinic →Dignity Health Lassen Medical Clinic experienced an unauthorized access incident between September 17 and September 20, 2024. The clinic discovered the active cyber event on September 20, 2024. An unauthorized third party gained access to the network and obtained copies of confidential patient medical information, though not directly from the Electronic Medical Record system. The network was temporarily disabled and restored with additional security tools. Identity monitoring services were provided to affected individuals.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_259071aa527182d9Maine State AGfiled 2025-03-25Candidate
- bd_482a2bfb49fd2893New Hampshire State AGfiled 2025-03-25Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-600355
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 25, 2025
- Raw hash
- 0c7208239577e8b64bb502cfcfba50aa539c8c08bda407bce9339beb27fc20c1
Reporting entity
- Name
- Dignity Health Lassen Medical Clinicnorm: dignity health lassen medical clinic
Victim entity
- Name
- Dignity Health Lassen Medical Clinicnorm: dignity health lassen medical clinic
Incident
- Discovered
- Sep 20, 2024
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Filed notification with California Attorney General
Compliance
- Time to disclose
- 27 weeks(186 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.