HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedPHIHealth (basic)Identity (basic)Financial accountLowContained

Great Expressions Dental Centers

bd_029ac2500c9ac745 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 22, 2023

Filed

Oct 2, 2023

To disclose

32 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for Great Expressions Dental Centers →2 incidents on file

Great Expressions Dental Centers notified patients that an unauthorized party accessed systems between Feb 17-22, 2023. The incident, discovered on Feb 22, potentially exposed PHI including names, DOB, contact info, diagnosis, treatment info, x-rays, and billing records. The company engaged forensic investigators, secured systems, and offered two years of identity monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 5 days

discovery → filing · 32 weeks / 222 days

Feb 17, 2023

Begins

Feb 22, 2023

Discovered

Oct 2, 2023

Filed

vs. sector median

+19 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Washington State AGbd_ad850cdc1fb866102023-10-05 · +3dVerified

Name: Great Expressions Dental Centers
norm: great expressions dental centers

Name: Great Expressions Dental Centers
norm: great expressions dental centers
Industry: Healthcarellm

Discovered: Feb 22, 2023
Breach occurred: Feb 17, 2023 – Feb 22, 2023
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PHIHealth (basic)Identity (basic)Financial account
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Contacted and worked with law enforcement and regulators

During the incident: Immediately took steps to secure our systems
Retained third-party forensic investigators to assist in our investigation
Contacted and worked with law enforcement and regulators
Implemented additional safeguards and technical security measures to further protect and monitor our systems
Secured the services of Kroll to provide two years of identity monitoring services at no cost
Changes made: Implemented additional safeguards and technical security measures to further protect and monitor our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 32 weeks(222 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGOct 2 · first · this page

Washington State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-574554
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 2, 2023
Raw hash: ca627fe385ebea6834160a347613283b77776cef0dbfa2cafc75654adedc022a

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityGreat Expressions Dental Centers

Victim entityGreat Expressions Dental Centers

Incidentdiscovered Feb 22, 2023

Stated responseImmediately took steps to secure our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov