MalwareHealthcareHealthcareRansomwareData ExfiltratedTargetedAuthenticationFinancial accountIdentity (basic)Government IDPHIHealth (basic)CriticalContained

Proliance Surgeons

bd_03f622ba6bd4bfe0 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Feb 11, 2023

Filed

Nov 20, 2023

To disclose

40 weeks

Affected

329,291state residents only

Linked

3 filings

Confidence

71%

Full breach record for Proliance Surgeons →2 incidents on file

Proliance Surgeons notified Washington AG of a ransomware incident on Feb 11, 2023, affecting 329,291 individuals. Personal info including names, DOBs, and SSNs was accessed. Proliance engaged forensic investigators, contained the network, and notified law enforcement. Credit monitoring and fraud assistance were offered to affected patients.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d40 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 40 weeks / 282 days

Feb 11, 2023

Begins

Feb 11, 2023

Discovered

Nov 20, 2023

Filed

vs. sector median

+29 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

HHS OCRbd_c82111fee14e67912023-11-20Verified
Massachusetts State AGbd_70e73a0fc07f374f2023-11-21 · +1dVerified

Name: Proliance Surgeons
norm: proliance surgeons
Domain: proliancesurgeons.com

Name: Proliance Surgeons
norm: proliance surgeons
Domain: proliancesurgeons.com
Industry: Healthcarellm

Discovered: Feb 11, 2023
Breach occurred: Feb 11, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 20, 2023
Affected individuals: 329,291state-resident count only
Data types: Identity (basic)Government ID
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birthMilitary ID numberPassport numberHealth insurance IDMedical informationUsername + password
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 0dexposure 0d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Attorney General

During the incident: Commenced an immediate and thorough investigation
Contained the network
Alerted law enforcement
Engaged third party cybersecurity professionals to investigate the extent of the activity
Changes made: Reviewed and revised its information security practices
Implemented additional security measures to mitigate the chance of a similar event in the future
Providing you with access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing you with proactive fraud assistance
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 40 weeks(282 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 2 states

View merged incident ↗

HHS OCRNov 20 · first

Washington State AGNov 20 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA27075.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 20, 2023
Raw hash: 0bf41a5c766edc1c77cd2bbbfcac5c49dc48d8d66131a2e1f232542a6b067436

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityProliance Surgeons

Victim entityProliance Surgeons

Incidentdiscovered Feb 11, 2023

Stated responseCommenced an immediate and thorough investigation

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com