Santa Rosa Oral Surgery data breach (2020)

Breach window

Dec 20, 2019 → Mar 11, 2020

When the intrusion reportedly occurred, per the linked filings

82 days

Breach discovered

Mar 11, 2020

Reported by CALIFORNIA AG filing

58 days

CALIFORNIAHHS OCRFirst filinglinked via same-victim cross-source · 100%

Filed May 8, 2020bd_0e3e13eedb660104

Santa Rosa & Rohnert Park Oral Surgery reported to HHS on 2020-05-08 a Unauthorized Access/Disclosure affecting 5357 individuals. Breached information located on Email. An employee was victim of an email phishing scheme exposing ePHI including names, addresses, birthdates, SSNs, driver's license numbers, claims, financial info, diagnoses, and medications. The CE notified HHS, individuals, and media, provided credit monitoring, retrained staff, and implemented technical safeguards.

Affected (this filing): 5,357

🐻California State AGMost recentlinked via same-victim cross-source · 100%

Filed May 8, 2020bd_ada22e6903b48248

Santa Rosa & Rohnert Park Oral Surgery experienced unauthorized access to an email account between Dec 20, 2019 and Mar 11, 2020. The incident involved valid account compromise. Patient names and PHI were potentially exposed. The organization engaged forensic investigators, reset passwords, notified law enforcement, and offered credit monitoring.

Santa Rosa Oral Surgery

Litigation Timing

Timeline