HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowContained
Asian Health Services
bd_eac42da496e36fd5 · schema v1 · pii pii-v1
Full breach record for Asian Health Services →Asian Health Services discovered unauthorized access to an employee email account between February 7 and February 13, 2023. The incident potentially exposed PHI including names, medical record numbers, dates of birth, phone numbers, and diagnoses for patients. No SSNs or financial data were involved. The organization secured the account, engaged forensic experts, notified law enforcement, and offered credit/cyber monitoring services to affected individuals.
California clockDiscovered Feb 13, 2023 → Notified Apr 1, 202347d ✓ CA 60-day OK12 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-566391
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 5, 2023
- Raw hash
- 3f7686eacc7d35dd8549ecefc4c095031e0ed84a8dfa81c3c375cb46951d29b4
Reporting entity
- Name
- Asian Health Servicesnorm: asian health
Victim entity
- Name
- Asian Health Servicesnorm: asian health
Incident
- Discovered
- Feb 13, 2023
- Materiality determined
- —
- Notification sent
- Apr 1, 2023
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Reported this incident to law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 12 weeks(81 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 47d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 13, 2023→ Notified: Apr 1, 202347d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.