Tiburcio Vasquez Health Center Inc.

The California Office of the Attorney General disclosed a data breach affecting Tiburcio Vasquez Health Center Inc., facilitated by a third-party vendor, CaptureRx, on February 6, 2021. The incident involved unauthorized access to electronic files containing sensitive personal information, including names, dates of birth, and prescription details of patients. While the exact number of impacted individuals remains undisclosed, the breach exposed confidential health-related data, raising concerns about potential misuse for identity theft, fraud, or targeted phishing attacks. The delayed reporting (disclosed on June 22, 2021) further compounds risks, as affected individuals may have remained unaware of their compromised data for months. Given the nature of the exposed information particularly prescription records the breach poses significant privacy and compliance risks under healthcare regulations like HIPAA. The incident underscores vulnerabilities in third-party vendor security protocols and the critical need for timely breach notifications to mitigate downstream harm.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-542134

TPRM report: https://www.rankiteo.com/company/tiburcio-vasquez-health-ctr

"id": "tib042091825",
"linkid": "tiburcio-vasquez-health-ctr",
"type": "Breach",
"date": "2/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'unknown',
                        'industry': 'Healthcare',
                        'location': 'California, USA',
                        'name': 'Tiburcio Vasquez Health Center Inc.',
                        'type': 'Healthcare Provider'},
                       {'customers_affected': 'unknown',
                        'industry': 'Healthcare Technology',
                        'name': 'CaptureRx',
                        'type': 'Service Provider'}],
 'data_breach': {'data_exfiltration': 'likely',
                 'file_types_exposed': ['electronic files'],
                 'number_of_records_exposed': 'unknown',
                 'personally_identifiable_information': ['names',
                                                         'dates of birth'],
                 'sensitivity_of_data': 'high',
                 'type_of_data_compromised': ['personal information',
                                              'health information']},
 'date_detected': '2021-02-06',
 'date_publicly_disclosed': '2021-06-22',
 'description': 'The California Office of the Attorney General reported that '
                'CaptureRx, on behalf of Tiburcio Vasquez Health Center Inc., '
                'experienced a data breach on February 6, 2021. The breach '
                'involved unauthorized access to electronic files containing '
                'personal information, including names, dates of birth, and '
                'prescription information. The number of affected individuals '
                'is unknown.',
 'impact': {'data_compromised': ['names',
                                 'dates of birth',
                                 'prescription information'],
            'identity_theft_risk': 'high',
            'systems_affected': ['electronic files']},
 'references': [{'source': 'California Office of the Attorney General'}],
 'regulatory_compliance': {'regulations_violated': ['potential HIPAA '
                                                    'violation'],
                           'regulatory_notifications': ['California Office of '
                                                        'the Attorney '
                                                        'General']},
 'title': 'Data Breach at CaptureRx Affecting Tiburcio Vasquez Health Center '
          'Inc.',
 'type': 'Data Breach'}