Castro Valley Health, Inc.

The California Office of the Attorney General reported that Castro Valley Health, Inc. experienced a data breach on January 1, 2017, affecting patient information. The breach was discovered on April 21, 2020, when it was found that patient data had been inadvertently transferred to Docker Hub, which was then promptly removed. The reported breach involved patient names, dates of birth, and medical record numbers, but did not include Social Security numbers or clinical information.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-190727

TPRM report: https://www.rankiteo.com/company/castro-valley-health-inc

"id": "cas158072725",
"linkid": "castro-valley-health-inc",
"type": "Breach",
"date": "1/2017",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'location': 'California',
                        'name': 'Castro Valley Health, Inc.',
                        'type': 'Healthcare'}],
 'attack_vector': 'Inadvertent Data Transfer',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'Medium',
                 'type_of_data_compromised': ['Patient names',
                                              'Dates of birth',
                                              'Medical record numbers']},
 'date_detected': '2020-04-21',
 'description': 'The California Office of the Attorney General reported that '
                'Castro Valley Health, Inc. experienced a data breach on '
                'January 1, 2017, affecting patient information. The breach '
                'was discovered on April 21, 2020, when it was found that '
                'patient data had been inadvertently transferred to Docker '
                'Hub, which was then promptly removed. The reported breach '
                'involved patient names, dates of birth, and medical record '
                'numbers, but did not include Social Security numbers or '
                'clinical information.',
 'impact': {'data_compromised': ['Patient names',
                                 'Dates of birth',
                                 'Medical record numbers']},
 'references': [{'source': 'California Office of the Attorney General'}],
 'response': {'containment_measures': 'Data promptly removed from Docker Hub'},
 'title': 'Castro Valley Health Data Breach',
 'type': 'Data Breach'}