MalwareHealthcareHealthcareRansomwareData EncryptedTargetedIdentity (basic)Government IDHealth (basic)PIIMediumContained

Ingleside

bd_03692cb42c0c5b82 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 21, 2017

Filed

Jan 19, 2018

To disclose

8 weeks

Affected

2state residents only

Linked

4 filings

Confidence

66%

Ingleside, a retirement community, notified residents of a criminal malware attack discovered on November 21, 2017. Personal information including names, SSNs, DOBs, and PHI may have been compromised. No evidence of misuse was found. Kroll provided one year of identity monitoring. Remediation included upgraded security, MFA, and staff training.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 59 days

Nov 21, 2017

Discovered

Jan 19, 2018

Filed

vs. sector median

4 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

New Hampshire State AGbd_1bacf7dcf0f4d20b2018-01-19Verified
California State AGbd_2ac4fe0b405bfcff2018-01-19Verified
Massachusetts State AGbd_513fbeadb059a1522018-01-22 · +3dVerified

Name: Westminster Ingleside King Farm Pres. Retirement Communities
norm: westminster ingleside king farm pres retirement communities

Name: Ingleside
norm: ingleside
Industry: Healthcarellm

Discovered: Nov 21, 2017
Materiality determined: —
Notification sent: Jan 17, 2018
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial

During the incident: Launched a software program to assist in finding and removing the malware from our system
Engaged independent computer forensics experts to determine how the incident occurred and if information had been accessed by an unauthorized third party
Secured the services of Kroll to provide identity monitoring at no cost to you for one year
Changes made: Upgrading our firewall, antivirus and malware security
Requiring all new user credentials/passwords
Adopting dual-factor authentication
Providing additional staff training on identifying unauthorized access
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(59 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGJan 19 · first

California State AGJan 19 · first

Montana State AGJan 19 · first · this page

Massachusetts State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Westminster-Ingleside-King-Farm-Pres-Retirement-Communities.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 19, 2018
Raw hash: 018606b5f2407677f129329603ed4ade9728a427463a194b55e26d51261973f4

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityWestminster Ingleside King Farm Pres. Retirement Communities

Victim entityIngleside

Incidentdiscovered Nov 21, 2017

Stated responseLaunched a software program to assist in finding and removing the malware from our system

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov