AccidentalHealthcareGovernmentHealthcareMisdeliveryCustomer Data InvolvedPHIHealth (basic)Identity (basic)LowResolved

California Department of State Hospitals - Coalinga

bd_e7631b429a2c95b6 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 12, 2021

Filed

Sep 3, 2021

To disclose

22 days

Affected

Not disclosed

Linked

2 filings

Confidence

66%

Full breach record for California Department of State Hospitals - Coalinga →

Department of State Hospitals - Coalinga disclosed an error where patient rosters containing PHI (name, case number, birth date, legal commitment, admission date, unit number, gender) were inadvertently provided to the US District Court, Eastern District of California, for filing fee waiver eligibility determinations. The incident was discovered on August 12, 2021. The hospital contacted the court to destroy the rosters and reported the breach to multiple state and federal regulators. No SSNs or financial data were involved.

J jump to incidentP pin to compareR raw source

California clockDiscovered Aug 12, 2021 → Notified Aug 30, 202118d ✓ CA 60-day OK22 days discovery → filing

Incident timeline

discovery → filing · 22 days

Aug 12, 2021

Discovered

Sep 3, 2021

Filed

vs. sector median

9 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_a65c2407e6b694192021-09-03Verified

Name: California Department of State Hospitals - Coalinga
norm: california department of state hospitals coalinga
Domain: dsh.ca.gov

Name: California Department of State Hospitals - Coalinga
norm: california department of state hospitals coalinga
Domain: dsh.ca.gov
Industry: HealthcarellmGovernmentllm

Discovered: Aug 12, 2021
Materiality determined: —
Notification sent: Aug 30, 2021
Affected individuals: Not disclosed
Data types: PHIHealth (basic)Identity (basic)
Attack vector: Unknown
Regulator citations: Reported to the California Office of Information SecurityReported to the California Highway PatrolReported to the U.S. Health and Human Services/Office of Civil RightsReported to the California Department of Public HealthReported to the California Department of JusticeReported to the California Office of Health Information Integrity

During the incident: Contacted the District Court Clerk to destroy any and all DSH-C patient rosters that have been provided to the District Court by DSH
Reported this breach to the California Office of Information Security, the California Highway Patrol, the U.S. Health and Human Services/Office of Civil Rights, the California Department of Public Health, the California Department of Justice, and the California Office of Health Information Integrity
Changes made: Reviewed and revised procedures the staff follow regarding patient records to provide DSH staff with further clarity, education, and awareness regarding data protection
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 days(22 days from discovery to filing)
Compliance flags: CA 60-day OK · 18d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Aug 12, 2021
→ Notified: Aug 30, 2021
18d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Aug 12, 2021 → Notified: Aug 30, 2021	18d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

HHS OCRSep 3 · first

California State AGSep 3 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-544919
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 3, 2021
Raw hash: 82c2efeb15fe6c4653621529cc8854ec9958b667e49269a2737e8a8d1c027c3a

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityCalifornia Department of State Hospitals - Coalinga

Victim entityCalifornia Department of State Hospitals - Coalinga

Incidentdiscovered Aug 12, 2021

Stated responseContacted the District Court Clerk to destroy any and all DSH-C patient rosters that have been provided to the District Court by DSH

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov