HackingData ExfiltratedCustomer Data InvolvedPHIIDENTITY_BASICHEALTH_BASICLowContained
Desert Physicians Management
bd_bdedfc33b41447ac · schema v1 · pii pii-v1
Full breach record for Desert Physicians Management →Desert Physicians Management (DPM) experienced unauthorized access to its computer systems on April 23, 2023. The investigation determined that certain files containing patient information, including names, addresses, dates of birth, health insurance information, and clinical data (diagnosis, treatment, medication), were copied from the network. Social Security numbers and financial account information were not involved. DPM engaged third-party forensic specialists, notified law enforcement, and implemented additional security measures.
California clockDiscovered Apr 23, 2023 → Notified Jun 22, 202360d ✓ CA 60-day OK9 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-568345
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 22, 2023
- Raw hash
- a94d2120d8c9dfc0ca3a51b5ab43f351a318248cbd8d5a07914e2c3abe7c3086
Reporting entity
- Name
- Desert Physicians Managementnorm: desert physicians management
Victim entity
- Name
- Desert Physicians Managementnorm: desert physicians management
Incident
- Discovered
- Apr 23, 2023
- Materiality determined
- —
- Notification sent
- Jun 22, 2023
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Reported the incident to law enforcement
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 60d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 23, 2023→ Notified: Jun 22, 202360d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.