AccidentalMisdeliveryCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTPIIMediumResolved
California Department of Health Care Services
bd_bf41e06fa6884f03 · schema v1 · pii pii-v1
Full breach record for California Department of Health Care Services →The California Department of Health Care Services (DHCS) notified residents that a subcontractor, Advanced Image Direct, misdirected IRS Form 1095-B mailings containing personal information (name, address, DOB, last 4 of SSN, case number) to unintended recipients. The error was discovered on January 12, 2023, following a breach date of January 9, 2023. DHCS paused operations, investigated, attempted retrieval of mail, and is offering credit monitoring.
California clockDiscovered Jan 12, 2023 → Notified Mar 13, 202360d ✓ CA 60-day OK10 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_331339bfc991426fHHS OCRfiled 2023-03-14(6d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-564534
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 20, 2023
- Raw hash
- 1bf5565b1b0892940e60319692b8c4bfc441278e96424c9ba0d545a8b8a7d88a
Reporting entity
- Name
- California Department of Health Care Servicesnorm: california department of health care
- Domain
- dhcs.ca.gov
Victim entity
- Name
- California Department of Health Care Servicesnorm: california department of health care
- Domain
- dhcs.ca.gov
Incident
- Discovered
- Jan 12, 2023
- Materiality determined
- —
- Notification sent
- Mar 13, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPII
- Attack vector
- Unknown
- Third party
- via Advanced Image Direct
Compliance
- Time to disclose
- 10 weeks(67 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 60d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 12, 2023→ Notified: Mar 13, 202360d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.