HackingData ExfiltratedCustomer Data InvolvedPIIPHIIDENTITY_BASICHEALTH_BASICLowContained
S.W., et al. v. Sunflower Medical Group, P.A.
bd_f42c06780ea08d46 · schema v1 · pii pii-v1
Full breach record for S.W., et al. v. Sunflower Medical Group, P.A. →Sunflower Medical Group, P.A. notified the California Attorney General of a data breach where an unauthorized third party accessed systems on or about December 15, 2024, and acquired copies of files containing personal information. The organization discovered the incident on January 7, 2025. Affected data includes personal and health information. The company engaged forensic investigators, secured systems, and offered one year of credit monitoring to affected individuals.
California clockDiscovered Jan 7, 2025 → Notified Feb 24, 202548d ✓ CA 60-day OK8 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-599633
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 7, 2025
- Raw hash
- 33bb32fe2017fba2d20302c706e07442a8df757c213101902a5863a8b24b73a1
Reporting entity
- Name
- S.W., et al. v. Sunflower Medical Group, P.A.norm: sw et al v sunflower medical
- Domain
- sunflowersettlement.com
Victim entity
- Name
- S.W., et al. v. Sunflower Medical Group, P.A.norm: sw et al v sunflower medical
- Domain
- sunflowersettlement.com
Incident
- Discovered
- Jan 7, 2025
- Materiality determined
- —
- Notification sent
- Feb 24, 2025
- Affected individuals
- Not disclosed
- Data types
- PIIPHIIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 48d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 7, 2025→ Notified: Feb 24, 202548d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.