CareSource
bd_edd2b075436c532c · schema v1 · pii pii-v1
Full breach record for CareSource →6 incidents on fileCareSource notified California residents of a cybersecurity incident at its vendor, OneTouchPoint (OTP), which prints and mails newsletters for CareSource. On April 28, 2022, OTP learned of an attack where files containing member information were locked by the attacker (ransomware). Affected data included names, addresses, diagnoses, medications, allergies, health screenings, immunizations, vital signs, and plan names. Social Security numbers and financial information were not involved. OTP shut down and rebuilt its systems and added technical controls.
J jump to incidentP pin to compareR raw source
Incident timeline
Apr 27, 2022
Begins
Apr 28, 2022
Discovered
Aug 1, 2022
Filed
vs. sector median
+3 wks slower
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- Indiana State AGbd_9cf05dd48b3700e32022-08-02 · +1dVerified
- Massachusetts State AGbd_c25c72603cbc2c332022-08-02 · +1dVerified
Filing propagation · 3 filings · 3 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.