{"id":714,"date":"2023-05-04T14:51:48","date_gmt":"2023-05-04T19:51:48","guid":{"rendered":"https:\/\/kentprotect.com\/?p=714"},"modified":"2023-05-04T22:01:35","modified_gmt":"2023-05-05T03:01:35","slug":"breach-report-santa-clara-family-health-plan-data-breach-affects-276000","status":"publish","type":"post","link":"https:\/\/kentprotect.com\/index.php\/2023\/05\/04\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\/","title":{"rendered":"Breach Report: Santa Clara Family Health Plan data breach affects 276,000+"},"content":{"rendered":"<div class='booster-block booster-read-block'><\/div>\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>One-sentence summary: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Santa Clara Family Health Plan (SCFHP) was breached in January 2023 during the Clop ransomware campaign on Fortra and <a href=\"https:\/\/kentprotect.com\/index.php\/2023\/05\/03\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\/\" target=\"_blank\" rel=\"noreferrer noopener\">NationsBenefits<\/a>, affecting 276,000+ Californian residents. <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Who was involved?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Santa Clara Family Health Plan (SCFHP), NationsBenefits Holding, LLC, Fortra, LLC,&nbsp;276,993 Californian residents, and the Clop ransomware group. <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>What was the timeline?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">January 30, 2023: Breach occurs affecting Fortra GoAnywhere MFT systems with tenancy by NationsBenefits, affecting Santa Clara Family Health Plan (SCFHP)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">February 7, 2023: SCFHP learns of the attack and begins an incident response <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">February 13, 2023: SCFHP discovers data was breached in the attack <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">March 30, 2023: Santa Clara Family Health Plan (SCFHP) notifies HHS of the breach <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>What occurred?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Santa Clara Family Health Plan (SCFHP) contracted services to NationsBenefits, which was <a href=\"https:\/\/kentprotect.com\/index.php\/2023\/05\/03\/breach-report-nationsbenefits-fortra-breach-affects-aetna-and-15000-consumers\/\" target=\"_blank\" rel=\"noreferrer noopener\">previously reported in the Fortra GoAnywhere breach campaign<\/a> by the Clop ransomware group. As a result, it was involved in NationsBenefit&#8217;s breach, affecting the sensitive data of over 276,993 Californian residents and may have breached: &#8220;name, demographic information (including address, phone number, gender, date of birth), phone number, health insurance number, medical ID number, Social Security number, date of service, medical device or product purchased and provider\/care giver name&#8221; (NationsBenefits, n.d.; Santa Clara Family Health Plan, n.d.; HHS, 2023). Community Health Systems <a href=\"https:\/\/kentprotect.com\/index.php\/2023\/02\/16\/2023-community-health-systems-chs-inc-data-breach\/\" target=\"_blank\" rel=\"noreferrer noopener\">was also affected<\/a> by the Fortra attacks, and, unfortunately, there are likely to be more organizations involved (estimated to be over 130) (Alder, 2023).   <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Estimated costs:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Associated incident response costs, breach notification costs, &#8220;leading cybersecurity firm,&#8221; M-F call center<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Involved laws: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Federal: HIPAA and HITECH <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">State: CCPA and Cal. Civ. Code \u00a7 1798.29(a)<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Root cause: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The zero-day, remote code execution vulnerability in Fortra\u2019s GoAnywhere MFT solution (CVE-2023-0669) (Gatlan, 2023, paras. 8-11; Duffy, 2023, p. 1).<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Lessons learned: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">TBA or N\/A (see disclaimer) (GoAnywhere is marketed as a HIPAA and HITECH-compliant SFTP solution) (Fortra, n.d.).<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Sources: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Alder, S. (2023, April 25). <em>277,000 Santa Clara Family Health Plan Members Affected by GoAnywhere Hack<\/em>. HIPAA Journal. Retrieved May 4, 2023, from https:\/\/www.hipaajournal.com\/277000-santa-clara-family-health-plan-members-affected-by-goanywhere-hack\/<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Duffy, R. (2023). Re: Data Security Incident. In <em>Security Breach Notifications<\/em>. New Hampshire Department of Justice Office of the Attorney General. Retrieved May 4, 2023, from https:\/\/www.doj.nh.gov\/consumer\/security-breaches\/documents\/nationsbenefits-holdings-20230413.pdf<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Fortra. (n.d.).&nbsp;<em>HIPAA &amp; HITECH Compliant File Transfers<\/em>. goanywhere.com. Retrieved February 16, 2023, from https:\/\/www.goanywhere.com\/solutions\/compliance\/hipaa-hitech<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Gatlan, S. (2023, February 14).&nbsp;<em>Healthcare giant CHS reports first data breach in GoAnywhere hacks<\/em>. BleepingComputer. Retrieved February 16, 2023, from https:\/\/www.bleepingcomputer.com\/news\/security\/healthcare-giant-chs-reports-first-data-breach-in-goanywhere-hacks\/<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">HHS. (2023). Cases Currently Under Investigation. In <em>Breach Portal: Notice to the Secretary of HHS Breach of Unsecured Protected Health Information<\/em>. U.S. Department of Health and Human Services Office for Civil Rights. Retrieved May 4, 2023, from https:\/\/ocrportal.hhs.gov\/ocr\/breach\/breach_report.jsf<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">NationsBenefits. (n.d.). Notice of Fortra Data Security Incident. In <em>NationsBenefits<\/em>. Retrieved May 4, 2023, from https:\/\/nationsbenefits.com\/incidentsupport<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Santa Clara Family Health Plan. (n.d.). <em>Santa Clara Family Health Plan<\/em>. Retrieved May 4, 2023, from https:\/\/www.scfhp.com\/<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Santa Clara Family Health Plan (romanempireagency.com). (2017, October). <em>santa-clara-white-bg-alt.png<\/em>. romanempireagency.com. https:\/\/www.romanempireagency.com\/wp-content\/uploads\/2017\/10\/santa-clara-white-bg-alt.png<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-4-3 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"Santa Clara Family Health Plan was involved in the Fortra GoAnywhere MFT hacks by Clop\" width=\"640\" height=\"480\" src=\"https:\/\/www.youtube.com\/embed\/B-KSi0AbP_c?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><figcaption class=\"wp-element-caption\">YouTube\/Blog Notification Post<\/figcaption><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>One-sentence summary: Santa Clara Family Health Plan (SCFHP) was breached in January 2023 during the Clop ransomware campaign<\/p>\n","protected":false},"author":4,"featured_media":716,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[480,3,12,85,13,76,63,274,75,61,11,10,74,430,14,45,566,43,44,355,567,8,27,220,67,594,15,81],"class_list":["post-714","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-breach-report","tag-breach","tag-breach-report","tag-breaches","tag-california","tag-ciso","tag-cloud","tag-computer-security","tag-computers","tag-cyber-security","tag-cybercrime","tag-cybersecurity","tag-dallas","tag-data-breach","tag-doctors","tag-executive","tag-healthcare","tag-healthinsurance","tag-hipaa","tag-hitech","tag-hospitals","tag-insurance","tag-kent-protect","tag-kentprotect","tag-nursing","tag-pwned","tag-santaclara","tag-summary","tag-texas"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Breach Report: Santa Clara Family Health Plan data breach affects 276,000+ - Kent Protect<\/title>\n<meta name=\"description\" content=\"Santa Clara Family Health Plan (SCFHP) was breached in January 2023 during the Clop ransomware campaign on Fortra and NationsBenefits, affecting 276,000+ Californian residents.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kentprotect.com\/index.php\/2023\/05\/04\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Breach Report: Santa Clara Family Health Plan data breach affects 276,000+ - Kent Protect\" \/>\n<meta property=\"og:description\" content=\"Santa Clara Family Health Plan (SCFHP) was breached in January 2023 during the Clop ransomware campaign on Fortra and NationsBenefits, affecting 276,000+ Californian residents.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kentprotect.com\/index.php\/2023\/05\/04\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\/\" \/>\n<meta property=\"og:site_name\" content=\"Kent Protect\" \/>\n<meta property=\"article:published_time\" content=\"2023-05-04T19:51:48+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-05-05T03:01:35+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/05\/santa-clara-white-bg-alt.png\" \/>\n\t<meta property=\"og:image:width\" content=\"352\" \/>\n\t<meta property=\"og:image:height\" content=\"224\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Kyler Kent CISSP\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kyler Kent CISSP\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/04\\\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/04\\\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\\\/\"},\"author\":{\"name\":\"Kyler Kent CISSP\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/person\\\/f9b4d76bd2f5b5559a08ad2e004a1116\"},\"headline\":\"Breach Report: Santa Clara Family Health Plan data breach affects 276,000+\",\"datePublished\":\"2023-05-04T19:51:48+00:00\",\"dateModified\":\"2023-05-05T03:01:35+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/04\\\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\\\/\"},\"wordCount\":516,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/04\\\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/santa-clara-white-bg-alt.png\",\"keywords\":[\"breach\",\"breach report\",\"breaches\",\"california\",\"ciso\",\"cloud\",\"computer security\",\"computers\",\"cyber security\",\"cybercrime\",\"cybersecurity\",\"dallas\",\"data breach\",\"doctors\",\"executive\",\"healthcare\",\"healthinsurance\",\"HIPAA\",\"HITECH\",\"hospitals\",\"insurance\",\"kent protect\",\"kentprotect\",\"nursing\",\"pwned\",\"santaclara\",\"summary\",\"texas\"],\"articleSection\":[\"The Breach Report!\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/04\\\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/04\\\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\\\/\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/04\\\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\\\/\",\"name\":\"Breach Report: Santa Clara Family Health Plan data breach affects 276,000+ - Kent Protect\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/04\\\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/04\\\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/santa-clara-white-bg-alt.png\",\"datePublished\":\"2023-05-04T19:51:48+00:00\",\"dateModified\":\"2023-05-05T03:01:35+00:00\",\"description\":\"Santa Clara Family Health Plan (SCFHP) was breached in January 2023 during the Clop ransomware campaign on Fortra and NationsBenefits, affecting 276,000+ Californian residents.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/04\\\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/04\\\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/04\\\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/santa-clara-white-bg-alt.png\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/santa-clara-white-bg-alt.png\",\"width\":352,\"height\":224,\"caption\":\"Santa Clara Family Health Plan logo (image source: Santa Clara Family Health Plan (romanempireagency.com), 2017)\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/05\\\/04\\\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kentprotect.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Breach Report: Santa Clara Family Health Plan data breach affects 276,000+\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#website\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/\",\"name\":\"Kent Protect\",\"description\":\"Starring the Breach Report! and other security and cybersecurity series\",\"publisher\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kentprotect.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\",\"name\":\"Kent Protect\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png\",\"width\":209,\"height\":161,\"caption\":\"Kent Protect\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/person\\\/f9b4d76bd2f5b5559a08ad2e004a1116\",\"name\":\"Kyler Kent CISSP\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"caption\":\"Kyler Kent CISSP\"},\"description\":\"Kyler Kent is a Senior Cybersecurity Analyst on CrowdStrike\u2019s Falcon Complete MDR team, where he helps large enterprises detect, investigate, and contain real intrusions across cloud and hybrid environments. His work spans threat hunting, incident response, and security automation\u2014turning noisy telemetry into clear, repeatable actions that reduce risk quickly. Previously, Kyler served as a Threat Hunting and Intelligence Specialist supporting a critical infrastructure provider in Dallas, and led security automation and operational coordination at CyberConvoy. He holds a Master\u2019s in Cybersecurity Risk Management from Georgetown University and maintains certifications including CISSP, AWS Solutions Architect \u2013 Professional, AWS Security \u2013 Specialty, and multiple CrowdStrike credentials. He writes to close the gap between \u201cwhat the textbook says\u201d and what analysts actually do on shift with his published book: \\\"SOC Analyst Career Guide\\\" (ISBN-13: 9781835467466). https:\\\/\\\/linktr.ee\\\/kentprotect.com Corrections: corrections@kentprotect.com\",\"sameAs\":[\"http:\\\/\\\/kylerkent.com\"],\"url\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/author\\\/kylerkent\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Breach Report: Santa Clara Family Health Plan data breach affects 276,000+ - Kent Protect","description":"Santa Clara Family Health Plan (SCFHP) was breached in January 2023 during the Clop ransomware campaign on Fortra and NationsBenefits, affecting 276,000+ Californian residents.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kentprotect.com\/index.php\/2023\/05\/04\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\/","og_locale":"en_US","og_type":"article","og_title":"Breach Report: Santa Clara Family Health Plan data breach affects 276,000+ - Kent Protect","og_description":"Santa Clara Family Health Plan (SCFHP) was breached in January 2023 during the Clop ransomware campaign on Fortra and NationsBenefits, affecting 276,000+ Californian residents.","og_url":"https:\/\/kentprotect.com\/index.php\/2023\/05\/04\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\/","og_site_name":"Kent Protect","article_published_time":"2023-05-04T19:51:48+00:00","article_modified_time":"2023-05-05T03:01:35+00:00","og_image":[{"width":352,"height":224,"url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/05\/santa-clara-white-bg-alt.png","type":"image\/png"}],"author":"Kyler Kent CISSP","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Kyler Kent CISSP","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/04\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\/#article","isPartOf":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/04\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\/"},"author":{"name":"Kyler Kent CISSP","@id":"https:\/\/kentprotect.com\/#\/schema\/person\/f9b4d76bd2f5b5559a08ad2e004a1116"},"headline":"Breach Report: Santa Clara Family Health Plan data breach affects 276,000+","datePublished":"2023-05-04T19:51:48+00:00","dateModified":"2023-05-05T03:01:35+00:00","mainEntityOfPage":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/04\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\/"},"wordCount":516,"commentCount":0,"publisher":{"@id":"https:\/\/kentprotect.com\/#organization"},"image":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/04\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\/#primaryimage"},"thumbnailUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/05\/santa-clara-white-bg-alt.png","keywords":["breach","breach report","breaches","california","ciso","cloud","computer security","computers","cyber security","cybercrime","cybersecurity","dallas","data breach","doctors","executive","healthcare","healthinsurance","HIPAA","HITECH","hospitals","insurance","kent protect","kentprotect","nursing","pwned","santaclara","summary","texas"],"articleSection":["The Breach Report!"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/kentprotect.com\/index.php\/2023\/05\/04\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/04\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\/","url":"https:\/\/kentprotect.com\/index.php\/2023\/05\/04\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\/","name":"Breach Report: Santa Clara Family Health Plan data breach affects 276,000+ - Kent Protect","isPartOf":{"@id":"https:\/\/kentprotect.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/04\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\/#primaryimage"},"image":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/04\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\/#primaryimage"},"thumbnailUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/05\/santa-clara-white-bg-alt.png","datePublished":"2023-05-04T19:51:48+00:00","dateModified":"2023-05-05T03:01:35+00:00","description":"Santa Clara Family Health Plan (SCFHP) was breached in January 2023 during the Clop ransomware campaign on Fortra and NationsBenefits, affecting 276,000+ Californian residents.","breadcrumb":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/04\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kentprotect.com\/index.php\/2023\/05\/04\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/04\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\/#primaryimage","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/05\/santa-clara-white-bg-alt.png","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/05\/santa-clara-white-bg-alt.png","width":352,"height":224,"caption":"Santa Clara Family Health Plan logo (image source: Santa Clara Family Health Plan (romanempireagency.com), 2017)"},{"@type":"BreadcrumbList","@id":"https:\/\/kentprotect.com\/index.php\/2023\/05\/04\/breach-report-santa-clara-family-health-plan-data-breach-affects-276000\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kentprotect.com\/"},{"@type":"ListItem","position":2,"name":"Breach Report: Santa Clara Family Health Plan data breach affects 276,000+"}]},{"@type":"WebSite","@id":"https:\/\/kentprotect.com\/#website","url":"https:\/\/kentprotect.com\/","name":"Kent Protect","description":"Starring the Breach Report! and other security and cybersecurity series","publisher":{"@id":"https:\/\/kentprotect.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kentprotect.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/kentprotect.com\/#organization","name":"Kent Protect","url":"https:\/\/kentprotect.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/#\/schema\/logo\/image\/","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png","width":209,"height":161,"caption":"Kent Protect"},"image":{"@id":"https:\/\/kentprotect.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/kentprotect.com\/#\/schema\/person\/f9b4d76bd2f5b5559a08ad2e004a1116","name":"Kyler Kent CISSP","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","caption":"Kyler Kent CISSP"},"description":"Kyler Kent is a Senior Cybersecurity Analyst on CrowdStrike\u2019s Falcon Complete MDR team, where he helps large enterprises detect, investigate, and contain real intrusions across cloud and hybrid environments. His work spans threat hunting, incident response, and security automation\u2014turning noisy telemetry into clear, repeatable actions that reduce risk quickly. Previously, Kyler served as a Threat Hunting and Intelligence Specialist supporting a critical infrastructure provider in Dallas, and led security automation and operational coordination at CyberConvoy. He holds a Master\u2019s in Cybersecurity Risk Management from Georgetown University and maintains certifications including CISSP, AWS Solutions Architect \u2013 Professional, AWS Security \u2013 Specialty, and multiple CrowdStrike credentials. He writes to close the gap between \u201cwhat the textbook says\u201d and what analysts actually do on shift with his published book: \"SOC Analyst Career Guide\" (ISBN-13: 9781835467466). https:\/\/linktr.ee\/kentprotect.com Corrections: corrections@kentprotect.com","sameAs":["http:\/\/kylerkent.com"],"url":"https:\/\/kentprotect.com\/index.php\/author\/kylerkent\/"}]}},"_links":{"self":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/714","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/comments?post=714"}],"version-history":[{"count":3,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/714\/revisions"}],"predecessor-version":[{"id":722,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/714\/revisions\/722"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/media\/716"}],"wp:attachment":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/media?parent=714"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/categories?post=714"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/tags?post=714"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}