HackingHealthcareHealthcareStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

VibrantCare Rehabilitation, Inc.

bd_c736d58711b23eab · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Feb 24, 2020

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for VibrantCare Rehabilitation, Inc. →2 incidents on file

VibrantCare Rehabilitation, Inc. reported unauthorized access to an employee email account between August 20 and August 27, 2019. The company investigated with third-party specialists and determined personal information may have been present. No evidence of misuse was found. Affected individuals were offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 20, 2019

Begins

Feb 24, 2020

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: VibrantCare Rehabilitation, Inc.
norm: vibrantcare rehabilitation

Name: VibrantCare Rehabilitation, Inc.
norm: vibrantcare rehabilitation
Industry: Healthcarellm

Discovered: —
Breach occurred: Aug 20, 2019 – Aug 27, 2019
Materiality determined: —
Notification sent: Dec 11, 2019
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Provided relevant regulatory notices
Initial access: valid_credentials

During the incident: Commenced an investigation with the assistance of third-party computer specialists
Resetting relevant passwords
Reviewing the contents of the email account to determine whether it contained sensitive information
Reviewing internal systems to identify contact information for purposes of providing notice
Notified law enforcement
Provided relevant regulatory notices
Offering access to complimentary credit monitoring and identity protection services for twelve (12) months through Experian
Changes made: Reviewing and enhancing existing policies and procedures
Conducting additional workforce training to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-187667
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 24, 2020
Raw hash: 183c5af3dacd251862853545e675ef6a269f83ea9ac5b54da40adb36c7dbd8c4

Reporting entityVibrantCare Rehabilitation, Inc.

Victim entityVibrantCare Rehabilitation, Inc.

IncidentUnauthorized Access

Stated responseCommenced an investigation with the assistance of third-party computer specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov