PhysicalTheftCustomer Data InvolvedEmployee Data InvolvedPHIHEALTH_BASICIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
Stanford School of Medicine
bd_da2afc3bbb8930de · schema v1 · pii pii-v1
Full breach record for Stanford School of Medicine →University of California San Francisco (UCSF) reported the theft of an unencrypted personal laptop from a physician's vehicle on September 25, 2013. The laptop contained protected health information (PHI), names, and potentially social security numbers, dates of birth, and medical record numbers of patients. UCSF determined the scope of the breach on November 13, 2013, and notified affected individuals on November 21, 2013. The incident involved physical theft of a device containing sensitive health data.
California clockDiscovered Sep 25, 2013 → Notified Nov 21, 201357d ✓ CA 60-day OK8 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-43352
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 21, 2013
- Raw hash
- 5af33ca43f10c2bb4f3652a8d392557a96287beef036637b8d1be36d4c7468af
Reporting entity
- Name
- Stanford School of Medicinenorm: stanford school of medicine
Victim entity
- Name
- Stanford School of Medicinenorm: stanford school of medicine
Incident
- Discovered
- Sep 25, 2013
- Materiality determined
- —
- Notification sent
- Nov 21, 2013
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
Compliance
- Time to disclose
- 8 weeks(57 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 57d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 25, 2013→ Notified: Nov 21, 201357d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.