HackingStolen CredentialsCustomer Data InvolvedPHIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Cornerstone Care Center
bd_c4d7b6cdaf74cc3d · schema v1 · pii pii-v1
Full breach record for Cornerstone Care Center →Sanger Skilled Care, LLC dba Cornerstone Care Center notified the California Attorney General of an incident where unauthorized activity involving one user account was detected on April 7, 2026. The organization contained the incident and engaged a forensic firm. Investigation determined that Protected Health Information (PHI) may have been accessed by an unauthorized third party. No evidence of misuse was found. Affected individuals were offered 12 months of complimentary credit monitoring.
California clockDiscovered Apr 7, 2026 → Notified May 7, 202630d ✓ CA 30-day OK4 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_90350c37e7da9de0HHS OCRfiled 2026-05-07Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-623043
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 7, 2026
- Raw hash
- 8fe629dea7dca99fabd174ff55827e9d479f59e8d28dcf453875769fd587a123
Reporting entity
- Name
- Cornerstone Care Centernorm: cornerstone care center
- Domain
- cornerstonecarecenter.com
Victim entity
- Name
- Cornerstone Care Centernorm: cornerstone care center
- Domain
- cornerstonecarecenter.com
Incident
- Discovered
- Apr 7, 2026
- Materiality determined
- —
- Notification sent
- May 7, 2026
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- CA 30-day OK · 30dCA AG copy ≤15d · 0d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 7, 2026→ Notified: May 7, 202630d 30 calendar days CA 30-day OK California Consumers notified: May 7, 2026→ AG copy submitted: May 7, 20260d 15 calendar days CA AG copy ≤15d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.