Keck Medicine of USC
bd_fa3e3127616abfc8 · schema v1 · pii pii-v1
Full breach record for Keck Medicine of USC →Conifer Revenue Cycle Solutions, LLC, a business associate of Keck Medicine of USC, reported a data breach involving unauthorized access to a Microsoft Office 365 business email account. The unauthorized access occurred between January 20, 2022, and April 14, 2022. The incident potentially exposed patient personal information, including names, dates of birth, addresses, Social Security numbers, driver's license numbers, financial account information, and medical/treatment records. Conifer engaged a security firm, reset passwords, blocked malicious IPs, and accelerated multi-factor authentication. IDX provided credit monitoring and identity theft protection services to affected individuals.
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_845e68edb765044cHHS OCRfiled 2022-11-29(60d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-557818
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 30, 2022
- Raw hash
- 9aded215c2be88e2f64ae78fcc8996286f03ac0991c500c50a75af8abad22206
Reporting entity
- Name
- Conifer Revenue Cycle Solutions, LLCnorm: conifer revenue cycle
Victim entity
- Name
- Keck Medicine of USCnorm: keck medicine of usc
- Domain
- keckmedicine.org
Incident
- Discovered
- Apr 14, 2022
- Materiality determined
- —
- Notification sent
- Sep 30, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Filed breach notification with California Office of the Attorney General
- Third party
- via Conifer Revenue Cycle Solutions, LLC
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 24 weeks(169 days from discovery to filing)
- Compliance flags
- CA 60-day late · 169d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 14, 2022→ Notified: Sep 30, 2022169d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.