MisuseHealthcareHealthcareData MishandlingSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Health (basic)LowContained

Community Family Care Medical Group IPA Inc.

bd_fa2ed35b171bb93a · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Oct 12, 2017

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for Community Family Care Medical Group IPA Inc. →2 incidents on file

Community Family Care Medical Group IPA, Inc notified patients that a contracted provider may have unauthorizedly disclosed member information to Heritage Provider Network affiliates in July 2016. Affected data included names, demographics, DOB, and insurance IDs. No SSNs or financial data were compromised. The company notified regulators and strengthened password protections.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 1, 2016

Begins

Oct 12, 2017

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Community Family Care Medical Group IPA Inc.
norm: community family care medical group ipa

Name: Community Family Care Medical Group IPA Inc.
norm: community family care medical group ipa
Industry: Healthcarellm

Discovered: —
Breach occurred: Jul 1, 2016 – Jul 31, 2016
Materiality determined: —
Notification sent: Oct 13, 2017
Affected individuals: Not disclosed
Data types: Identity (basic)Health (basic)
Attack vector: Third-Party / Supply Chain
Threat actor: Partner
Regulator citations: Notified the United States Office of Civil Rights
Third party: via Heritage Provider Network
Initial access: trusted_relationship

During the incident: Notified the appropriate state and Federal government officials and agencies of the possible incident, including the United States Office of Civil Rights
Continue our privileged and confidential forensic investigation
Changes made: Strengthened our password protection
Trained doctors and their staff to not provide unauthorized persons data downloaded from our systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-102607
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 12, 2017
Raw hash: d34667164dd83ee340fd8be47fb643c740c768e76154e09316cebeb7c29673d6

Reporting entityCommunity Family Care Medical Group IPA Inc.

Victim entityCommunity Family Care Medical Group IPA Inc.

IncidentThird-Party / Supply Chain

Stated responseNotified the appropriate state and Federal government officials and agencies of the possible incident, including the United States Office of Civil Rights

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov