California Correctional Health Care Services data breach (2017)

Breach window

Jan 23, 2017

When the intrusion reportedly occurred, per the linked filings

Breach discoveredletter-grounded

Jan 26, 2017

Reported by CALIFORNIA AG filing

🐻California State AGFirst filinglinked via operator-confirmed · 100%

Filed Feb 9, 2017bd_ab0ed16c8f90813c

On January 23, 2017, a staff member at California Correctional Health Care Services (CCHCS) inadvertently sent an email containing inmate personal information (name, CDCR number, housing info, mental health info, provider names) to a staff member at another California State department. CCHCS was informed on January 26, 2017. The recipient confirmed deletion of the email. CCHCS provided information security training to staff.

CA 60-day OK · 4d

CALIFORNIAHHS OCRMost recentlinked via operator-confirmed · 100%

Filed Feb 9, 2017bd_cc7b622c2bad0b81

California Correctional Health Care Services reported to HHS on 2017-02-09 an Unauthorized Access/Disclosure affecting 738 individuals. A workforce member sent an email and spreadsheet attachment to a wrong recipient (an executive liaison at the CA Governor's Office of Emergency Services with the same last name as the intended recipient). ePHI included names, CDCR ID numbers, housing information, mental health information, and health care provider information. The CE retrained the employee and implemented email encryption. Breached info located in Email.

Affected (this filing):

California Correctional Health Care Services

Litigation Timing

Timeline