DisclosureLens
HackingHealthcareHealthcareStolen CredentialsCustomer Data InvolvedDelayed DiscoveryPHIIdentity (basic)Government IDHealth (basic)FinancialMediumContained

Alameda Health System

bd_e787e8baa176312c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 23, 2022

Filed

Jun 24, 2022

To disclose

17 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

65%
Full breach record for Alameda Health System →3 incidents on file

Alameda Health System disclosed that unauthorized third parties remotely accessed employee email accounts from May 2020 to March 2022. The incident was discovered on February 23, 2022. Affected data may include names, dates of birth, patient IDs, clinical information, health insurance details, Social Security numbers, and driver's license numbers. The organization engaged forensic investigators and offered one year of credit monitoring.

Incident timeline

undetected · 663 days
discovery → filing · 17 weeks / 121 days

May 1, 2020

Begins

Feb 23, 2022

Discovered

Jun 24, 2022

Filed

vs. sector median

+8 wks slower

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 2 states

View merged incident ↗
Illinois State AGJan 1 · first
HHS OCR+139d
California State AG+174d · this page

Pattern: first filing Jan 1 (IL), last Jun 24 (CA) — a 174-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.