AccidentalMisconfigurationData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPHIHEALTH_BASICIDENTITY_BASICLowContained
GUARDANT HEALTH, INC.
bd_bf30833a7e61dbb3 · schema v1 · pii pii-v1
Full breach record for GUARDANT HEALTH, INC. →Guardant Health, Inc. disclosed that a file containing personal and medical information (names, ages, medical record numbers, treatment info, test results) was inadvertently made publicly accessible on an online platform due to employee error. The file was transferred in October 2020 but discovered on March 4, 2024. Unidentified third parties copied the file between September 8, 2023, and February 28, 2024. No financial information or SSNs were involved. Guardant removed the file, investigated, and enhanced technical controls.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_0cc35de939dca402Vermont State AGfiled 2024-05-03Verified
- bd_667d31d8ec325fcaMontana State AGfiled 2024-05-03Verified
- bd_dc3c65f1e089173fHHS OCRfiled 2024-04-26(7d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-584811
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 3, 2024
- Raw hash
- 43f5cb91fbdd21a7540d1c61b56d77dfced594da55c5c752e7467ea573210bd5
Reporting entity
- Name
- GUARDANT HEALTH, INC.norm: guardant health
- Domain
- guardanthealth.com
Victim entity
- Name
- GUARDANT HEALTH, INC.norm: guardant health
- Domain
- guardanthealth.com
Incident
- Discovered
- Mar 4, 2024
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1119 Automated Collection
- Threat actor
- External
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.