MalwareRansomwareRansom DemandedRansom PaidData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHIMediumContained
Alicia Surgery Center
bd_f2c27b21599bfd4f · schema v1 · pii pii-v1
Full breach record for Alicia Surgery Center →Alicia Surgery Center and Harvard Eye Associates reported a ransomware incident involving a third-party data storage vendor. Hackers accessed the vendor's system, encrypted data, and demanded ransom, which was paid. The breach affected patient and employee data, including PHI, SSNs, and financial info. The incident occurred around October 24, 2020, and was discovered in January 2021. Affected individuals were offered IDX identity protection services.
California clockDiscovered Jan 15, 2021 → Notified Feb 5, 202121d ✓ CA 60-day OK5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-538039
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 16, 2021
- Raw hash
- f3907ac36549ad6a671f7cdb62303193b419ea0928ee90d6ba87f43175761bc4
Reporting entity
- Name
- Alicia Surgery Centernorm: alicia surgery center
Victim entity
- Name
- Alicia Surgery Centernorm: alicia surgery center
Incident
- Discovered
- Jan 15, 2021
- Materiality determined
- —
- Notification sent
- Feb 5, 2021
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHI
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Regulator citations
- Submitted breach notification to California Office of the Attorney General
- Initial access
- supply_chain
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 21d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 15, 2021→ Notified: Feb 5, 202121d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.