AccidentalHealthcareFinancial ServicesHealthcareMisdeliveryCustomer Data InvolvedPHIHealth (basic)Identity (basic)LowResolved

L.A. Care Health Plan

bd_c5c00e75c2c486ed · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 18, 2012

Filed

Oct 22, 2012

To disclose

5 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

66%

Full breach record for L.A. Care Health Plan →6 incidents on file

L.A. Care Health Plan experienced an accidental mailing error where member ID cards containing names, member ID numbers, and dates of birth were sent to the wrong members. The incident occurred between September 17 and September 20, 2012, and was discovered on September 18, 2012. The organization notified affected members and issued replacement cards. No sensitive financial or detailed medical data was exposed.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 5 weeks / 34 days

Sep 17, 2012

Begins

Sep 18, 2012

Discovered

Oct 22, 2012

Filed

vs. sector median

8 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_0d0a1a9a030c62fc2012-10-22Verified

Name: L.A. Care Health Plan
norm: la care health plan
Domain: lacare.org

Name: L.A. Care Health Plan
norm: la care health plan
Domain: lacare.org
Industry: HealthcarellmFinancial Servicesllm

Discovered: Sep 18, 2012
Breach occurred: Sep 17, 2012 – Sep 20, 2012
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PHIHealth (basic)Identity (basic)
Attack vector: Unknown

During the incident: Sent notification letters to affected members
Sending new ID cards to all affected members
Reviewing and revising procedures and practices to minimize the risk of this happening again
Changes made: Reviewing and revising procedures and practices to minimize the risk of this happening again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(34 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

HHS OCROct 22 · first

California State AGOct 22 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-36791
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 22, 2012
Raw hash: d5910859c1a8da1afab41661f6acc45fb30306597303c6bea47da5b2127f5586

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityL.A. Care Health Plan

Victim entityL.A. Care Health Plan

Incidentdiscovered Sep 18, 2012

Stated responseSent notification letters to affected members

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov