HackingHealthcareHealthcareStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDHealth (basic)PHIMediumContained

Terry J. Dubrow, M.D., F.A.C.S

bd_bb8d63f815bfac9f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 27, 2026

Filed

Aug 13, 2026

To disclose

17 days

Affected

Not disclosed

Linked

6 filings

Confidence

66%

Full breach record for Terry J. Dubrow, M.D., F.A.C.S →

Terry J. Dubrow, MD, A Medical Corporation experienced unauthorized access to its network beginning January 16, 2025. An unauthorized actor accessed patient data including names, SSNs, driver's license numbers, and medical records. The Practice discovered the breach on July 27, 2026, and notified the FBI. The incident is contained, and affected individuals were offered complimentary identity protection services.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jul 27, 2026 → Notified Aug 13, 202617d ✓ CA 30-day OK17 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 557 days

discovery → filing · 17 days

Jan 16, 2025

Begins

Jul 27, 2026

Discovered

Aug 13, 2026

Filed

vs. sector median

8 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Nebraska State AGbd_0597927890e3e8df2026-08-13Verified
New Hampshire State AGbd_40fade2712071d932026-08-13Verified
Vermont State AGbd_83278cd229cc9e4e2026-08-13Verified
Massachusetts State AGbd_ed114086939f5bf82026-08-13Verified

Show 1 more filing ↓up to 1d gap

Texas State AGbd_5cbed1872fc549dc2026-08-14 · +1dVerified

Name: Terry J. Dubrow, M.D., F.A.C.S
norm: terry j dubrow md facs
Domain: drdubrow.com

Name: Terry J. Dubrow, M.D., F.A.C.S
norm: terry j dubrow md facs
Domain: drdubrow.com
Industry: Healthcarellm

Discovered: Jul 27, 2026
Breach occurred: Jan 16, 2025
Undetected for: 557 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 13, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDHealth (basic)PHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Reported the incident to the Federal Bureau of Investigation
Initial access: valid_credentials

During the incident: Engaged forensic experts to investigate
Secured systems
Reported the incident to the Federal Bureau of Investigation
Changes made: Implemented additional measures to enhance the security of the systems
Offered 12/24 months of complimentary identity protection services from IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 days(17 days from discovery to filing)
Compliance flags: CA 30-day OK · 17d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jul 27, 2026
→ Notified: Aug 13, 2026
17d 30 calendar days CA 30-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jul 27, 2026 → Notified: Aug 13, 2026	17d	30 calendar days	CA 30-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Nebraska State AGAug 13 · first

New Hampshire State AGAug 13 · first

Vermont State AGAug 13 · first

Massachusetts State AGAug 13 · first

California State AGAug 13 · first · this page

Texas State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-628219
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 13, 2026
Raw hash: a31ba97570a374a22680233710317c838183df2158554c9bc9a14457469a5221

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityTerry J. Dubrow, M.D., F.A.C.S

Victim entityTerry J. Dubrow, M.D., F.A.C.S

Incidentdiscovered Jul 27, 2026

Stated responseEngaged forensic experts to investigate

ComplianceCA 30-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov