DisclosureLens
HackingHealthcareHealthcareVulnerability ExploitCustomer Data InvolvedIdentity (basic)Financial accountLowContained

SHARP HEALTHCARE

bd_b8b2f5541805219c · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 12, 2023

Filed

Feb 6, 2023

To disclose

25 days

Affected

Not disclosed

Linked

2 filings

Confidence

65%
Full breach record for SHARP HEALTHCARE →3 incidents on file

On January 12, 2023, Sharp HealthCare identified suspicious activity on a server running its website. An unauthorized person gained access for a few hours and obtained a file containing patient names, internal identification/invoice numbers, payment amounts, and proof of payment to Sharp hospitals or medical groups. No SSNs, bank account details, credit card numbers, or clinical health information were involved. Sharp took servers offline, engaged a forensic firm, and enhanced website server security.

California clockDiscovered Jan 12, 2023 → Notified Feb 3, 202322d ✓ CA 60-day OK25 days discovery → filing

Incident timeline

discovery → filing · 25 days

Jan 12, 2023

Begins

Jan 12, 2023

Discovered

Feb 6, 2023

Filed

vs. sector median

7 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings

View merged incident ↗
California State AGFeb 6 · first · this page
HHS OCR+11d

Pattern: first filing Feb 6 (CA), last Feb 17 (CA) — a 11-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.