MisusePrivilege AbuseCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowContained
Pedes Orange County, Inc.
bd_e0bd32b0ea24443c · schema v1 · pii pii-v1
Full breach record for Pedes Orange County, Inc. →Pedes Orange County, Inc. disclosed that on November 14, 2017, a physician from another medical group sharing the same facility accessed the company's electronic medical records database without permission and disclosed materials to their attorney. The breach involved personal health information including names, diagnoses, treatments, and dates of service. Social Security numbers and financial account information were not involved. The company worked with the unauthorized individual to destroy the accessed information and is evaluating security protocols.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-132631
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 12, 2018
- Raw hash
- e3f6cfa5d854ec3154f6eb40604ae61ef94b78e86744e2f8bd069b2021df1845
Reporting entity
- Name
- Pedes Orange County, Inc.norm: pedes orange county
Victim entity
- Name
- Pedes Orange County, Inc.norm: pedes orange county
Incident
- Discovered
- Nov 14, 2017
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- Partner
- Initial access
- trusted_relationship
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.