MalwareHealthcareHealthcareRansomwareData EncryptedCustomer Data InvolvedPHIHealth (basic)Identity (basic)LowResolved

Northern California Fertility Medical Center Inc.

bd_f32a44d3b9b0788e · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Sep 28, 2022

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for Northern California Fertility Medical Center Inc. →

Northern California Fertility Medical Center (NCFMC) experienced a network security incident on July 24, 2022, where an unauthorized third-party infiltrated the network and attempted to encrypt data. NCFMC shut off network access and engaged forensic resources. The investigation revealed that names and status regarding ultrasounds or cryopreserved tissue may have been exposed. No evidence of misuse was found. NCFMC does not store SSNs or credit card information. The network has been secured and remediated.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 24, 2022

Begins

Sep 28, 2022

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_aef8e8d3685df6592022-09-21 · +7dVerified

Name: Northern California Fertility Medical Center Inc.
norm: northern california fertility medical center

Name: Northern California Fertility Medical Center Inc.
norm: northern california fertility medical center
Industry: Healthcarellm

Discovered: —
Breach occurred: Jul 24, 2022
Materiality determined: —
Notification sent: Sep 28, 2022
Affected individuals: Not disclosed
Data types: PHIHealth (basic)Identity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External
Regulator citations: Reported this matter to law enforcement

During the incident: Shut off all access to the network
Engaged specialized third-party forensic and technical resources to respond to the incident
Secured and remediated its network and the data that we maintain
Initiated a comprehensive investigation into the cause and extent of the unauthorized activity
Reported this matter to law enforcement
Reviewed and altered our tools, policies, and procedures relating to the security of our systems and servers
Changes made: Reviewed and altered our tools, policies, and procedures relating to the security of our systems and servers
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

HHS OCRSep 21 · first

California State AG+7d · this page

Pattern: first filing Sep 21 (CA), last Sep 28 (CA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-557717
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 28, 2022
Raw hash: cafda5bf597ba5dc743ea3fc2380f4123f69ac895999589681ea8500283f5fec

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityNorthern California Fertility Medical Center Inc.

Victim entityNorthern California Fertility Medical Center Inc.

IncidentRansomware

Stated responseShut off all access to the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov