AccidentalMisdeliveryCustomer Data InvolvedPHIIDENTITY_BASICHEALTH_BASICLowResolved
CardioFit Medical Group, Inc.
bd_d322ce828fe1498e · schema v1 · pii pii-v1
Full breach record for CardioFit Medical Group, Inc. →CardioFit Medical Group, Inc. disclosed that between January 8 and February 5, 2026, protected health information was sent via unencrypted email. The incident was discovered on February 17, 2026. Affected data included names, demographic details, clinical information (diagnosis), and insurance information. No SSNs, bank accounts, or credit cards were involved. The organization strengthened email encryption procedures and provided staff training.
California clockDiscovered Feb 17, 2026 → Notified Apr 10, 202652d ✗ CA 30-day late7 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_d7c8cc88c2cb68aaHHS OCRfiled 2026-04-09Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-621561
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 9, 2026
- Raw hash
- 89a5075a29f994b84e57675d7a5121bc111b89c1357952b5c408a02dae9770fc
Reporting entity
- Name
- CardioFit Medical Group, Inc.norm: cardiofit medical
Victim entity
- Name
- CardioFit Medical Group, Inc.norm: cardiofit medical
Incident
- Discovered
- Feb 17, 2026
- Materiality determined
- —
- Notification sent
- Apr 10, 2026
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unknown
Compliance
- Time to disclose
- 7 weeks(51 days from discovery to filing)
- Compliance flags
- CA 30-day late · 52dCA AG copy ≤15d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 17, 2026→ Notified: Apr 10, 202652d 30 calendar days CA 30-day late California Consumers notified: Apr 10, 2026→ AG copy submitted: Apr 9, 2026— 15 calendar days CA AG copy ≤15d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.