PhysicalHealthcareHealthcareTheftCustomer Data InvolvedPHIHealth (basic)Identity (basic)Financial accountHighContained

AHMC Healthcare Inc.

bd_ba53c58c1a00fb96 · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 14, 2013

Filed

Oct 21, 2013

To disclose

7 days

Affected

729,000

Linked

2 filings

Confidence

66%

Full breach record for AHMC Healthcare Inc. →

AHMC Healthcare Inc. reported the theft of two password-protected laptops from a secure office in Alhambra, California, on October 12, 2013. The laptops contained protected health information for approximately 729,000 patients, including names, Medicare/insurance IDs, diagnosis codes, and payment data. The theft was discovered on October 14, 2013. AHMC notified law enforcement and is implementing encryption policies for all laptops.

J jump to incidentP pin to compareR raw source

California clockDiscovered Oct 14, 2013 → Notified Oct 21, 20137d ✓ CA 60-day OK7 days discovery → filing

Incident timeline

undetected · 2 days

discovery → filing · 7 days

Oct 12, 2013

Begins

Oct 14, 2013

Discovered

Oct 21, 2013

Filed

vs. sector median

8 wks faster

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_97855b965efacda92013-10-25 · +4dVerified

Name: AHMC Healthcare Inc.
norm: ahmc healthcare

Name: AHMC Healthcare Inc.
norm: ahmc healthcare
Industry: Healthcarellm

Discovered: Oct 14, 2013
Breach occurred: Oct 12, 2013
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 21, 2013
Affected individuals: 729,000nationwide
Data types: PHIHealth (basic)Identity (basic)Financial account
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External

During the incident: Notified the Alhambra Police Department
Working with local law enforcement to recover the stolen property
Engaged a third-party auditing company to perform a security risk assessment
Expediting a policy of encrypting all laptops
Changes made: Expediting a policy of encrypting all laptops
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 days(7 days from discovery to filing)
Compliance flags: CA 60-day OK · 7d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Oct 14, 2013
→ Notified: Oct 21, 2013
7d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Oct 14, 2013 → Notified: Oct 21, 2013	7d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

California State AGOct 21 · first · this page

HHS OCR+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-43054
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 21, 2013
Raw hash: d8c37bc04f1de8173b578d46b1c130b89f82ac25afa076bf9397763eeb82f614

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityAHMC Healthcare Inc.

Victim entityAHMC Healthcare Inc.

Incidentdiscovered Oct 14, 2013

Stated responseNotified the Alhambra Police Department

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov