UnknownCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowContained
Birch Medical
bd_ec4db6754055750b · schema v1 · pii pii-v1
Full breach record for Birch Medical →Birch Medical LLC notified the California Attorney General of an incident in September 2024 where unauthorized individuals may have accessed a folder containing patient health information and names. The investigation could not confirm if files were accessed, but notices were sent out of an abundance of caution. No SSNs or financial data were involved. Affected individuals include residents of California and Rhode Island.
California clockDiscovered Sep 1, 2024 → Notified Feb 27, 2025179d ✗ CA 60-day late26 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_21643f37fa4a20c4Maryland State AGfiled 2025-03-03Verified
- bd_3d885f4429eec6efMontana State AGfiled 2025-02-27(4d gap)Candidate
- bd_50d383c5c1fa63f3Vermont State AGfiled 2025-02-27(4d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-599367
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 3, 2025
- Raw hash
- 69f6cfff86bf9c6d6103bc5db5ac3e5f7a4df3807389484541ede99c7e31e5b7
Reporting entity
- Name
- Birch Medicalnorm: birch medical
Victim entity
- Name
- Birch Medicalnorm: birch medical
Incident
- Discovered
- Sep 1, 2024
- Materiality determined
- —
- Notification sent
- Feb 27, 2025
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unknown
Compliance
- Time to disclose
- 26 weeks(183 days from discovery to filing)
- Compliance flags
- CA 60-day late · 179d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 1, 2024→ Notified: Feb 27, 2025179d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.