HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedIDENTITY_BASICHEALTH_BASICLowContained
Community Memorial Health System
bd_ea74e56b7df0e770 · schema v1 · pii pii-v1
Full breach record for Community Memorial Health System →Guidehouse, on behalf of Community Memorial Health System (Ventura, CA), disclosed a breach of a third-party secure file transfer service in January 2021. The incident compromised patient data including names, dates of birth, member IDs, addresses, and medical information. Guidehouse notified the health system on May 21, 2021, and offered two years of credit monitoring via Experian.
California clockDiscovered Mar 1, 2021 → Notified May 21, 202181d ✗ CA 60-day late20 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-542968
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 16, 2021
- Raw hash
- 3ef36c64ce8fbce81bed90dde50db68ddac28a200b524c07857017f8cf171301
Reporting entity
- Name
- GUIDEHOUSE INC.norm: guidehouse
Victim entity
- Name
- Community Memorial Health Systemnorm: community memorial health system
- Industry
- healthcare
Incident
- Discovered
- Mar 1, 2021
- Materiality determined
- —
- Notification sent
- May 21, 2021
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Initial access
- supply_chain
Compliance
- Time to disclose
- 20 weeks(137 days from discovery to filing)
- Compliance flags
- CA 60-day late · 81d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 1, 2021→ Notified: May 21, 202181d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.