HackingHealthcareHealthcareCustomer Data InvolvedData ExfiltratedPHIIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

Redwood Coast Regional Center

bd_d2aee317976d4d8f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 6, 2024

Filed

Nov 4, 2024

To disclose

35 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

65%

Full breach record for Redwood Coast Regional Center →2 incidents on file

Redwood Coast Regional Center experienced a network disruption on March 6, 2024, which led to the discovery that an unauthorized individual had acquired certain information. The breach occurred on February 26, 2024. Affected data included names, addresses, phone numbers, dates of birth, health insurance information, medical history, diagnosis/treatment information, and Social Security numbers. The organization secured its network, engaged third-party investigators, implemented additional technical safeguards, and offered 12 months of credit monitoring and identity protection services to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Mar 6, 2024 → Notified Sep 26, 2024204d ✗ CA 60-day late35 weeks discovery → filing

Incident timeline

undetected · 9 days

discovery → filing · 35 weeks / 243 days

Feb 26, 2024

Begins

Mar 6, 2024

Discovered

Nov 4, 2024

Filed

vs. sector median

+24 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitelockbit_3bd_03de47509ae2333f2024-03-06 · +243dVerified by operator
Leak Sitelockbit_3bd_fd59e0ea2acf9bf92024-03-05 · +244dVerified

Regulatory filings (4) · sorted by filing gap

Montana State AGbd_2edbb7969dd98f4b2024-11-04Verified by operator
Vermont State AGbd_06c33aec61c448f22024-11-05 · +1dVerified by operator
Massachusetts State AGbd_737cab0aae297e152024-11-05 · +1dVerified by operator
HHS OCRbd_9b23af0a82f7e2722024-05-03 · +185dVerified

Name: Redwood Coast Regional Center
norm: redwood coast regional center
Domain: redwoodcoastrc.org

Name: Redwood Coast Regional Center
norm: redwood coast regional center
Domain: redwoodcoastrc.org
Industry: Healthcarellm

Discovered: Mar 6, 2024
Breach occurred: Feb 26, 2024
Undetected for: 9 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 26, 2024
Affected individuals: Not disclosed
Data types: PHIIdentity (basic)Government IDHealth (basic)Financial account
Data elements: Date of birthMedical information
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Filed notification with California Attorney General

During the incident: Took immediate steps to secure our network
Engaged third-party specialists to assist in an investigation
Implemented additional technical safeguards to further enhance the security of information
Providing access to twelve (12) months of credit monitoring and identity protection services at no cost
Providing proactive fraud assistance
Changes made: Implemented additional technical safeguards to further enhance the security of information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 35 weeks(243 days from discovery to filing)
Compliance flags: CA 60-day late · 204dLeak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Mar 6, 2024
→ Notified: Sep 26, 2024
204d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Mar 6, 2024 → Notified: Sep 26, 2024	204d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

HHS OCRMay 3 · first

Montana State AG+185d

California State AG+185d · this page

Vermont State AG+186d

Massachusetts State AG+186d

Pattern: first filing May 3 (CA), last Nov 5 (MA) — a 186-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-594369
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 4, 2024
Raw hash: a1fab40d53ecde5a10e746afe84280e88d9e005ccd1423211a3e44bcb735bc73

Linked disclosures

Ransomware claims (2)

Regulatory filings (4) · sorted by filing gap

Reporting entityRedwood Coast Regional Center

Victim entityRedwood Coast Regional Center

Incidentdiscovered Mar 6, 2024

Stated responseTook immediate steps to secure our network

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov