HackingCustomer Data InvolvedDelayed DiscoveryPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIALMediumContained
BAYMARK HEALTH SERVICES, INC.
bd_d9bc679cc6a12d27 · schema v1 · pii pii-v1
Full breach record for BAYMARK HEALTH SERVICES, INC. →BayMark Health Services, Inc. disclosed that an unauthorized party accessed files on its systems between September 24 and October 14, 2024. The company learned of the incident on October 11, 2024. Affected data included names, Social Security numbers, driver's license numbers, dates of birth, and health/treatment information. The incident did not impact patient care at facilities. BayMark engaged forensic experts, notified law enforcement, and is offering one year of credit monitoring.
California clockDiscovered Oct 11, 2024 → Notified Mar 20, 2025160d ✗ CA 60-day late29 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_284788f3a693a9e0Leak Siteransomhubfiled 2024-10-11(203d gap)Candidate
Regulatory filings (2) · sorted by filing gap
- bd_0773210a4cd26ea6Oregon State AGfiled 2025-05-02Verified
- bd_d75ef725e07d4c8dWashington State AGfiled 2025-05-02Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-602162
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 2, 2025
- Raw hash
- 957efdbb43e8a81bd0b8f11e273724bc3d0ebacf0916acfcd91d2e5fea9841e9
Reporting entity
- Name
- BAYMARK HEALTH SERVICES, INC.norm: baymark health
- Domain
- baymark.com
Victim entity
- Name
- BAYMARK HEALTH SERVICES, INC.norm: baymark health
- Domain
- baymark.com
Incident
- Discovered
- Oct 11, 2024
- Materiality determined
- —
- Notification sent
- Mar 20, 2025
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 29 weeks(203 days from discovery to filing)
- Compliance flags
- CA 60-day late · 160dLeak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 11, 2024→ Notified: Mar 20, 2025160d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.