PhysicalHealthcareHealthcareTheftCustomer Data InvolvedPHIHealth (basic)Identity (basic)LowContained

Riverside County Regional Medical Center

bd_cf9ab943a4df7d5d · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 18, 2014

Filed

Jun 24, 2014

To disclose

6 days

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for Riverside County Regional Medical Center →2 incidents on file

Riverside County Regional Medical Center reported the theft of a laptop containing patient health information, including names, dates of birth, medical record numbers, and nerve conduction study results. The laptop was lost between June 17 and June 18, 2014. No SSNs or insurance information were involved.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jun 18, 2014 → Notified Jun 24, 20146d ✓ CA 60-day OK6 days discovery → filing

Incident timeline

discovery → filing · 6 days

Jun 17, 2014

Begins

Jun 18, 2014

Discovered

Jun 24, 2014

Filed

vs. sector median

10 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_e61074774588b4762014-06-24Verified by operator

Name: Riverside County Regional Medical Center
norm: riverside county regional medical center

Name: Riverside County Regional Medical Center
norm: riverside county regional medical center
Industry: Healthcarellm

Discovered: Jun 18, 2014
Breach occurred: Jun 17, 2014 – Jun 18, 2014
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 24, 2014
Affected individuals: Not disclosed
Data types: PHIHealth (basic)Identity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Regulator citations: Filed notification with California Attorney General

During the incident: Notified the Privacy Office at RCRMC
Engaged the Riverside County Sheriff’s Department in investigation
Engaged the Riverside County Information Security Office in investigation
Taking immediate steps to enhance computer security
Further restricting access to sensitive hospital locations
Changes made: Enhancing computer security
Restricting access to sensitive hospital locations
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 days(6 days from discovery to filing)
Compliance flags: CA 60-day OK · 6d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jun 18, 2014
→ Notified: Jun 24, 2014
6d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jun 18, 2014 → Notified: Jun 24, 2014	6d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

HHS OCRJun 24 · first

California State AGJun 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-45615
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 24, 2014
Raw hash: f97c7c279724294c363e4c5c57430f332c520c79e7b5e6598614865acedec401

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityRiverside County Regional Medical Center

Victim entityRiverside County Regional Medical Center

Incidentdiscovered Jun 18, 2014

Stated responseNotified the Privacy Office at RCRMC

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov