Social EngineeringHealthcareHealthcarePhishingCustomer Data InvolvedPIIIdentity (basic)LowContained

JDC Healthcare Management, LLC

bd_00a4c6a868eb7f3f · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 19, 2019

Filed

Feb 7, 2020

To disclose

16 weeks

Affected

2state residents only

Linked

2 filings

Confidence

66%

Full breach record for JDC Healthcare Management, LLC →6 incidents on file

JDC Healthcare Management notified Montana residents of a phishing incident involving unauthorized access to a corporate email account between July 21 and August 26, 2019. The breach was discovered on October 19, 2019. The company engaged forensic investigators, notified HHS and state regulators, and provided 12 months of credit monitoring via Experian. No evidence of actual misuse was found.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 90 days

discovery → filing · 16 weeks / 111 days

Jul 21, 2019

Begins

Oct 19, 2019

Discovered

Feb 7, 2020

Filed

vs. sector median

+4 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_dea89107590342c12020-02-07Verified

Name: JDC Healthcare Management, LLC
norm: jdc healthcare management

Name: JDC Healthcare Management, LLC
norm: jdc healthcare management
Industry: Healthcarellm

Discovered: Oct 19, 2019
Breach occurred: Jul 21, 2019 – Aug 26, 2019
Undetected for: 90 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Regulator citations: notifying regulators of the incident as required, including the U.S. Department of Health and Human Services and certain state regulators
Initial access: phishing_link

During the incident: Launched an investigation, with the aid of forensic investigators
Notifying regulators of the incident as required, including the U.S. Department of Health and Human Services and certain state regulators
Providing you with access to twelve (12) months of credit monitoring and identity protection services from Experian at no cost to you
Changes made: Implement additional safeguards and review policies and procedures relating to data privacy and security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(111 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

HHS OCRFeb 7 · first

Montana State AGFeb 7 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-60.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 7, 2020
Raw hash: 08291b5cbb3ea991fb38d07e0825a0635ddbd1f93c290b5f7b4681593d9cd4ba

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityJDC Healthcare Management, LLC

Victim entityJDC Healthcare Management, LLC

Incidentdiscovered Oct 19, 2019

Stated responseLaunched an investigation, with the aid of forensic investigators

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov