MisuseData MishandlingCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowResolved
Sonoma County Indian Health Project, Inc
bd_f3371135e2fe9b18 · schema v1 · pii pii-v1
Full breach record for Sonoma County Indian Health Project, Inc →Sonoma County Indian Health Project, Inc. disclosed that a former employee sent an unencrypted email containing patient names, dates of birth, appointment dates, and some health information to their personal email address. The incident was discovered on March 16, 2018, with the breach occurring on March 8, 2018. The organization deleted the email and offered one year of credit monitoring to affected individuals.
California clockDiscovered Mar 16, 2018 → Notified Apr 5, 201820d ✓ CA 60-day OK17 days discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_2b9e020fda518bd8HHS OCRfiled 2018-03-30(3d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-134935
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 2, 2018
- Raw hash
- ea540359d285b83bc408b36b2ff6fb02180c6039ed73798dfbb7748073e71aeb
Reporting entity
- Name
- Sonoma County Indian Health Project, Incnorm: sonoma county indian health project
Victim entity
- Name
- Sonoma County Indian Health Project, Incnorm: sonoma county indian health project
Incident
- Discovered
- Mar 16, 2018
- Materiality determined
- —
- Notification sent
- Apr 5, 2018
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Insider
- Threat actor
- Internal
- Regulator citations
- Reported to the California Attorney General
- Initial access
- insider_action
Compliance
- Time to disclose
- 17 days(17 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 20d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 16, 2018→ Notified: Apr 5, 201820d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.