PhysicalTheftCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowContained
University of California
bd_efaf9e941395ae2b · schema v1 · pii pii-v1
Full breach record for University of California →UCLA Health reported the theft of a password-protected laptop belonging to a faculty member on July 3, 2015. The device contained limited PHI for patients of the Department of Radiation Oncology, including names, dates of birth, medical record numbers, and treatment information. No SSNs or financial data were present. UCLA Health engaged ID Experts, enhanced security policies, and retrained staff.
California clockDiscovered Jul 3, 2015 → Notified Sep 1, 201560d ✓ CA 60-day OK9 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-57650
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 1, 2015
- Raw hash
- ac3f4dba7bd1f14aa0d539bdae074abc4ac5e813c8d74eb5f40a843bd99501a1
Reporting entity
- Name
- University of Californianorm: university of california
- Domain
- admission.universityofcalifornia.edu
Victim entity
- Name
- University of Californianorm: university of california
- Domain
- admission.universityofcalifornia.edu
Incident
- Discovered
- Jul 3, 2015
- Materiality determined
- —
- Notification sent
- Sep 1, 2015
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 60d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 3, 2015→ Notified: Sep 1, 201560d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.