PhysicalTheftCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowContained
Hoag Clinic
bd_e7b8343251919c03 · schema v1 · pii pii-v1
Full breach record for Hoag Clinic →Hoag Clinic reported the theft of a staff member's laptop from a vehicle in Newport Beach, CA, on June 5, 2020. The laptop contained protected health information (PHI) for 738 individuals, including names, addresses, medical record numbers, and treatment details. No evidence of data access or misuse was found. Hoag filed a police report, conducted an internal investigation, and offered one year of identity monitoring to affected patients.
California clockDiscovered Jun 5, 2020 → Notified Jul 31, 202056d ✓ CA 60-day OK8 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_8a5cf0aba2760433HHS OCRfiled 2020-08-03Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-192669
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 3, 2020
- Raw hash
- bcdd38a5deb77692fc5c7b6c8d5bac307109c0367c12fe51c64f25f8da9e3503
Reporting entity
- Name
- Hoag Clinicnorm: hoag clinic
Victim entity
- Name
- Hoag Clinicnorm: hoag clinic
Incident
- Discovered
- Jun 5, 2020
- Materiality determined
- —
- Notification sent
- Jul 31, 2020
- Affected individuals
- 738
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 56d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 5, 2020→ Notified: Jul 31, 202056d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.