Covenant Care California, LLC, on behalf of relevant affiliated nursing facilities

Organization

Covenant Care California, LLC, on behalf of relevant affiliated nursing facilities

Source

California AG · source record

Date reported

May 9, 2022

Date(s) of breach

Thursday, February 24, 2022

Residents affected

Not published by this source

Data exposed

Medical / health information Email address

Notice letter

Sample notice (PDF)

Discovered

Feb 24, 2022, as stated in the letter

"Working with our Information Technology (“IT”) Director, IT support services, and third-party forensic investigators, we determined that an unauthorized actor(s) gained access to the employee’s email account for several hours via a phish..."

Days to notice

74 days from discovery (Feb 24, 2022) to the California record (May 9, 2022). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82). Over the statutory period

Offered in the letter

12 months of credit or identity monitoring through Experian

Third party

The letter attributes the incident to a vendor or service provider

First seen by BreachTally

2026-10-30 16:02 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.