MalwareHealthcareHealthcareRansomwareRansom DemandedData ExfiltratedIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

Florida Orthopaedic Institute

bd_012235dae82ea25b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 9, 2020

Filed

Jun 22, 2020

To disclose

11 weeks

Affected

70state residents only

Linked

6 filings

Confidence

65%

Florida Orthopaedic Institute notified Montana of a ransomware attack discovered on April 9, 2020. The incident encrypted server data and resulted in the potential access of patient PII, including SSNs, DOBs, and medical records. FOI engaged forensic investigators and offered Kroll identity monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 11 weeks / 74 days

Apr 9, 2020

Discovered

Jun 22, 2020

Filed

vs. sector median

2 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_82e8625c5ca8d7de2020-06-22Verified
California State AGbd_9b712997a5d8567e2020-06-22Verified
New Hampshire State AGbd_f8e2e4feb154cc092020-06-22Verified
Indiana State AGbd_fae168e43f6afb9f2020-06-22Verified

Show 1 more filing ↓up to 9d gap

HHS OCRbd_811b98dae592a09c2020-07-01 · +9dVerified

Name: Florida Orthopaedic Institute
norm: florida orthopaedic

Name: Florida Orthopaedic Institute
norm: florida orthopaedic
Industry: Healthcarellm

Discovered: Apr 9, 2020
Materiality determined: —
Notification sent: —
Affected individuals: 70state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Engaged a third-party forensic investigator to assist with the investigation
Secured the services of Kroll to provide identity monitoring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(74 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Massachusetts State AGJun 22 · first

California State AGJun 22 · first

New Hampshire State AGJun 22 · first

Indiana State AGJun 22 · first

Montana State AGJun 22 · first · this page

HHS OCR+9d

Pattern: first filing Jun 22 (MA), last Jul 1 (FL) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Breach-NotificationDetails-192.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 22, 2020
Raw hash: eaa3b2bc6f63172df10b96d8a4243bf7bde8a54954551c979e0cbb0b935782ea

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityFlorida Orthopaedic Institute

Victim entityFlorida Orthopaedic Institute

Incidentdiscovered Apr 9, 2020

Stated responseEngaged a third-party forensic investigator to assist with the investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov