Sutter Senior Care data breach (2023)

Breach window

May 28, 2023

When the intrusion reportedly occurred, per the linked filings

Breach discoveredletter-grounded

May 31, 2023

Reported by CALIFORNIA AG filing

52 days

🐻California State AGFirst filinglinked via same-victim cross-source · 100%

Filed Jul 22, 2023bd_21791ec6387ec632

Sutter Senior Care PACE notified residents of a data breach involving their vendor, Cognisight, LLC. Cognisight was impacted by the global MOVEit exploit. On May 31, 2023, Sutter Senior Care learned of the incident. Forensic investigation confirmed files were taken from the MOVEit server. Affected data includes names, dates of birth, SSNs, and health information. Credit monitoring was provided.

CALIFORNIAHHS OCRMost recentlinked via same-victim cross-source · 100%

Filed Jul 22, 2023bd_dbc20324d95e1c1c

Sutter Senior Care (CA) reported to HHS on 2023-07-22 a Hacking/IT Incident affecting 519 individuals. A software application used by its business associate (BA) exposed PHI including names, dates of birth, Social Security numbers, diagnoses, claims information, and other treatment information. The CE notified HHS, affected individuals, and media, and provided credit monitoring. The CE and BA implemented additional administrative, technical, and security safeguards.

Affected (this filing): 519

Sutter Senior Care

Litigation Timing

Sensitive data

Timeline