HackingCustomer Data InvolvedData ExfiltratedPHIIDENTITY_BASICHEALTH_BASICLowContained
Navvis & Company, LLC
bd_f4c28766fb97e655 · schema v1 · pii pii-v1
Full breach record for Navvis & Company, LLC →Navvis & Company, LLC, a health management services provider, reported a cyber-attack where an unauthorized actor accessed systems containing personal and protected health information between July 12 and July 25, 2023. The incident was discovered on July 25, 2023. This supplemental notice updates prior disclosures. Affected data includes names, dates of birth, health plan info, and medical records. Credit monitoring is offered.
California clockDiscovered Jul 25, 2023 → Notified Jan 9, 2024168d ✗ CA 60-day late24 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_495a8622b7338450California State AGfiled 2023-12-29(11d gap)Verified
- bd_807126e4c7ec4b16Oregon State AGfiled 2023-12-29(11d gap)Candidate
- bd_9514dafc4153c0c8Washington State AGfiled 2023-12-29(11d gap)Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-579111
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 9, 2024
- Raw hash
- 29885d8fb28ecc10eaa4c90ab8e850355bf0bc634d0eac3ca3ee4a4d6e70f431
Reporting entity
- Name
- Navvis & Company, LLCnorm: navvis
Victim entity
- Name
- Navvis & Company, LLCnorm: navvis
Incident
- Discovered
- Jul 25, 2023
- Materiality determined
- —
- Notification sent
- Jan 9, 2024
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified applicable regulatory authorities
Compliance
- Time to disclose
- 24 weeks(168 days from discovery to filing)
- Compliance flags
- CA 60-day late · 168d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 25, 2023→ Notified: Jan 9, 2024168d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.