TEXASHackingHealthcareHealthcarePhishingStolen CredentialsCustomer Data InvolvedPHIHealth (basic)Identity (basic)MediumResolved

Smith Dental Care

bd_03661da5a52b4449 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 28, 2018

Filed

Oct 17, 2018

To disclose

19 days

Affected

5,000

Confidence

67%

Full breach record for Smith Dental Care →

Smith Dental Care reported to HHS on 2018-10-17 a Hacking/IT Incident affecting 5000 individuals. Breached information located on Desktop Computer, Email. A workforce member's credentials were compromised via phishing, exposing PHI including names, phone numbers, and email addresses.

J jump to incidentP pin to compareR raw source

HIPAA clock✓ HHS report on time19 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 19 days

Sep 28, 2018

Discovered

Oct 17, 2018

Filed

vs. sector median

8 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5,000 affectedView incident

Name: Smith Dental Care
norm: smith dental care
Industry: Health Care Services

Name: Smith Dental Care
norm: smith dental care
Industry: Health Care Services
Industry: Healthcaresource default

Discovered: Sep 28, 2018
Materiality determined: —
Notification sent: —
Affected individuals: 5,000nationwide
Data types: PHIHealth (basic)Identity (basic)
HHS breach type: Hacking / IT incident
Where the data lived: Desktop computerEmail
Covered-entity type: Healthcare provider
Attack vector: Unauthorized Access
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Regulator citations: OCR obtained assurances that the CE implemented the corrective actions listed above and provided technical assistance on the requirements of the Breach Notification Rule
Initial access: phishing_link

During the incident: Improved technical safeguards
Retrained workforce members
Provided breach notification to HHS, affected individuals, and the media
Changes made: Improved technical safeguards
Retrained workforce members
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 days(19 days from discovery to filing)
Compliance flags: HHS report on timeHHS notified
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: Sep 28, 2018
→ Notified: not extracted
— 60 days HHS report on time
HIPAA
Discovered: Sep 28, 2018
→ Notified: not extracted
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: Sep 28, 2018 → Notified: not extracted	—	60 days	HHS report on time
HIPAA	Discovered: Sep 28, 2018 → Notified: not extracted	—	regulatory submission	HHS notified

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Oct 17, 2018
Raw hash: 5547bd8ccbd1597e201d38fc1e69159440e2142893f57b09d0cfbc08cab4653f

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html1.7 KB

Download View at source

Reporting entitySmith Dental Care

Victim entitySmith Dental Care

Incidentdiscovered Sep 28, 2018

Stated responseImproved technical safeguards

ComplianceHHS report on time

Extraction provenanceno artifact recorded

Source provenanceocrportal.hhs.gov

Source filing