HackingData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICPHIHEALTH_BASICLowContained
Tri-City Healthcare District
bd_fbab899607e33014 · schema v1 · pii pii-v1
Full breach record for Tri-City Healthcare District →Tri-City Healthcare District notified individuals of a data security incident where an unknown actor gained access to and obtained data from the network on November 8, 2023. The organization became aware of unusual activity on November 9, 2023. Affected data includes names and potentially protected health information. The organization engaged cybersecurity experts, notified the FBI and DHS, and is offering credit monitoring services.
California clockDiscovered Nov 9, 2023 → Notified Oct 11, 2024337d ✗ CA 60-day late48 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_dc5cdcf78bf65121Vermont State AGfiled 2024-10-11(1d gap)Verified
- bd_90f32ce204efbcf6New Hampshire State AGfiled 2024-10-14(2d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-593304
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 12, 2024
- Raw hash
- a91f378906daaecb3ae72ef974b19ec67c1856a62892d10baea4ee9bcaecf133
Reporting entity
- Name
- Tri-City Healthcare Districtnorm: tri city healthcare district
Victim entity
- Name
- Tri-City Healthcare Districtnorm: tri city healthcare district
Incident
- Discovered
- Nov 9, 2023
- Materiality determined
- —
- Notification sent
- Oct 11, 2024
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICPHIHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified the Federal Bureau of InvestigationNotified U.S. Department of Homeland Security
Compliance
- Time to disclose
- 48 weeks(338 days from discovery to filing)
- Compliance flags
- CA 60-day late · 337d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 9, 2023→ Notified: Oct 11, 2024337d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.