PhysicalHealthcareHealthcareTheftCustomer Data InvolvedData ExfiltratedPHIHealth (basic)Identity (basic)LowContained

Foundation for Medical Care of Merced County

bd_b8dd50928fcfae17 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Oct 26, 2021

To disclose

—

Affected

Not disclosed

Confidence

77%

On August 3, 2021, a physical break-in occurred at the Foundation for Medical Care of Merced County's facility. An unknown intruder entered by punching a hole through a wall from an adjacent office suite and stole an external backup drive containing scanned paper medical and dental claims. Data potentially exposed included names, healthcare ID numbers, addresses, dates of birth, provider names, procedure/diagnosis codes, and claim charges (PHI). The Foundation notified Merced Police, added building security, and offered one year of Experian IdentityWorks to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 3, 2021

Begins

Oct 26, 2021

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Foundation for Medical Care of Merced County
norm: foundation for medical care of merced county
Domain: tkfmc.org

Name: Foundation for Medical Care of Merced County
norm: foundation for medical care of merced county
Domain: tkfmc.org
Industry: Healthcarellm

Discovered: —
Breach occurred: Aug 3, 2021
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PHIHealth (basic)Identity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External
Regulator citations: Reported to City of Merced Police Department

During the incident: Reported this incident to the City of Merced Police Department immediately
Worked closely with the City of Merced Police
Added security to the building
Provided additional layers of physical and data security
Offering a complimentary one-year membership of Experian's IdentityWorks to affected individuals
Changes made: Added security to the building
Provided additional layers of physical and data security
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-546855
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 26, 2021
Raw hash: 90fd10160faacd57c36c7903e4e885a089437fc95d91193e526080d13ec572b9

Reporting entityFoundation for Medical Care of Merced County

Victim entityFoundation for Medical Care of Merced County

IncidentUnknown

Stated responseReported this incident to the City of Merced Police Department immediately

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov