PhysicalTheftCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowResolved
KAISER FOUNDATION HEALTH PLAN, INC.
bd_c9da0c6a00d54aba · schema v1 · pii pii-v1
Full breach record for KAISER FOUNDATION HEALTH PLAN, INC. →Kaiser Permanente discovered on May 20, 2022, that an iPad containing photos of COVID-19 lab specimen labels was stolen from a locked storage area at the Los Angeles Medical Center. The photos potentially contained first name, last name, medical record number, date of birth, and date/location of service for affected individuals. No SSNs or credit card numbers were involved. The device was remotely wiped, and law enforcement was notified.
California clockDiscovered May 20, 2022 → Notified Jul 15, 202256d ✓ CA 60-day OK8 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-555311
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 15, 2022
- Raw hash
- 3127348b7fa9d520d8c698156d16e1282b69849553ad1512b04eea7179922674
Reporting entity
- Name
- KAISER FOUNDATION HEALTH PLAN, INC.norm: kaiser foundation health plan
- Domain
- healthy.kaiserpermanente.org
Victim entity
- Name
- KAISER FOUNDATION HEALTH PLAN, INC.norm: kaiser foundation health plan
- Domain
- healthy.kaiserpermanente.org
Incident
- Discovered
- May 20, 2022
- Materiality determined
- —
- Notification sent
- Jul 15, 2022
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Threat actor
- External
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 56d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 20, 2022→ Notified: Jul 15, 202256d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.