HackingHealthcareHealthcareStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedEmployee Data InvolvedIdentity (basic)Government IDCredentialsMediumContained

El Centro Regional Medical Center (ECRMC)

bd_c95d376245867601 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 1, 2018

Filed

Nov 20, 2018

To disclose

16 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

64%

Full breach record for El Centro Regional Medical Center (ECRMC) →

El Centro Regional Medical Center notified individuals that their personal information, including names, addresses, phone numbers, dates of birth, usernames, passwords, email addresses, and Social Security Numbers, was stolen from Jobscience, a third-party vendor used for processing job applications. The theft occurred between May 8, 2018, and May 11, 2018. ECRMC was notified in late August 2018. The incident involved an unknown third party. ECRMC offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

California clockDiscovered Aug 1, 2018 → Notified Nov 13, 2018104d ✗ CA 60-day late16 weeks discovery → filing

Incident timeline

undetected · 85 days

discovery → filing · 16 weeks / 111 days

May 8, 2018

Begins

Aug 1, 2018

Discovered

Nov 20, 2018

Filed

vs. sector median

+3 wks slower

This filing is one of 3 about the same incident.View merged incident

Part of JobScience supply-chain incident (2018) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_762475ae82da2c3d2018-11-20Verified
Montana State AGbd_f8d0afcabb7a16152018-11-16 · +4dCandidate

Name: El Centro Regional Medical Center (ECRMC)
norm: el centro regional medical center ecrmc

Name: El Centro Regional Medical Center (ECRMC)
norm: el centro regional medical center ecrmc
Industry: Healthcarellm

Discovered: Aug 1, 2018
Breach occurred: May 8, 2018 – May 11, 2018
Undetected for: 85 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 13, 2018
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDCredentials
Data elements: Date of birth
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: External
Regulator citations: Jobscience worked with the Federal Bureau of Investigation (FBI)
Third party: via Jobscience
Initial access: supply_chain

During the incident: Worked with Jobscience and an outside forensic vendor to determine what individuals were impacted
Confirmed that Jobscience has worked with the Federal Bureau of Investigation (FBI) and a service provider to investigate the incident
Provided 24 months of complimentary credit monitoring through Experian IdentityWorks
Set up a dedicated call center with bilingual agents to answer questions regarding this incident
Changes made: Jobscience contained the incident, ended the third party’s access to their system, and remediated the issues that led to the compromise
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(111 days from discovery to filing)
Compliance flags: CA 60-day late · 104d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Aug 1, 2018
→ Notified: Nov 13, 2018
104d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Aug 1, 2018 → Notified: Nov 13, 2018	104d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGNov 16 · first

Massachusetts State AG+4d

California State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-141928
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 20, 2018
Raw hash: 3bd6b8c67cbc89b0c86756445f4119de59d7695e207b8f1dd78217290f15114d

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityEl Centro Regional Medical Center (ECRMC)

Victim entityEl Centro Regional Medical Center (ECRMC)

Incidentdiscovered Aug 1, 2018

Stated responseWorked with Jobscience and an outside forensic vendor to determine what individuals were impacted

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov