HackingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedBusiness Associate (HIPAA)PIIPHIIDENTITY_BASICHEALTH_BASICLowContained
Calibrated Healthcare, LLC, on behalf of its covered entity clients
bd_e452ae9c6aa57255 · schema v1 · pii pii-v1
Full breach record for Calibrated Healthcare, LLC, on behalf of its covered entity clients →Calibrated Healthcare, LLC reported unauthorized access to its network between Feb 25-26, 2024. Suspicious activity was identified on Feb 26, 2024, leading to systems being taken offline. Investigation determined files were likely copied without authorization. The incident involved PHI and PII of clients served by Calibrated as a business associate. Notification began May 1, 2024. This is a supplemental notice.
California clockDiscovered Feb 26, 2024 → Notified May 1, 202465d ✗ CA 60-day late37 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-594766
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 12, 2024
- Raw hash
- c6c1e9ebd06a8ed54ad67b7815f50379b7d82ea869f7ebad09974e7f005f7e57
Reporting entity
- Name
- Calibrated Healthcare, LLCnorm: calibrated healthcare
Victim entity
- Name
- Calibrated Healthcare, LLC, on behalf of its covered entity clientsnorm: calibrated healthcare llc on behalf of its covered entity clients
Incident
- Discovered
- Feb 26, 2024
- Materiality determined
- —
- Notification sent
- May 1, 2024
- Affected individuals
- Not disclosed
- Data types
- PIIPHIIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 37 weeks(260 days from discovery to filing)
- Compliance flags
- CA 60-day late · 65d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 26, 2024→ Notified: May 1, 202465d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.