HackingHealthcareTechnologyHealthcareStolen CredentialsBECRansom DemandedData ExfiltratedSupply Chain (3P Vendor)PIIIdentity (basic)LowContained

Health Center Partners of Southern California

bd_061adccd52816a0a · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 8, 2021

Filed

Apr 8, 2021

To disclose

4 weeks

Affected

134state residents only

Linked

6 filings

Confidence

65%

Full breach record for Health Center Partners of Southern California →2 incidents on file

Health Center Partners of Southern California (HCP) notified individuals of a data breach involving its IT provider, Netgain Technology. An unauthorized third party accessed Netgain's systems between Oct 22 and Dec 3, 2020, exfiltrating HCP data. Netgain paid a ransom. HCP discovered the incident on March 8, 2021, and notified affected individuals on March 18, 2021. PII was involved. HCP engaged forensic experts and reported to the FBI.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 137 days

discovery → filing · 4 weeks / 31 days

Oct 22, 2020

Begins

Mar 8, 2021

Discovered

Apr 8, 2021

Filed

vs. sector median

8 wks faster

This filing is one of 6 about the same incident.View merged incident

Part of Netgain Networks supply-chain incident (2021) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_50ad05ee6a4a06f62021-04-08Verified
HHS OCRbd_e46d5b364a3336482021-04-09 · +1dVerified
California State AGbd_435d5512e8a6d8a02021-04-21 · +13dVerified
New Hampshire State AGbd_342dbf40b3d168a62021-04-22 · +14dVerified

Show 1 more filing ↓up to 14d gap

Massachusetts State AGbd_59d32f5e66b8b8df2021-04-22 · +14dVerified

Name: Health Center Partners of Southern California
norm: health center partners of southern california

Name: Health Center Partners of Southern California
norm: health center partners of southern california
Industry: HealthcarellmTechnologyllm

Discovered: Mar 8, 2021
Breach occurred: Oct 22, 2020 – Dec 3, 2020
Undetected for: 137 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 18, 2021
Affected individuals: 134state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Reported the incident to law enforcement agencies, including the Federal Bureau of Investigation
Third party: via Netgain Technology, LLC
Initial access: external_remote_services

During the incident: Brought all of its systems offline
Engaged outside cybersecurity experts to conduct an investigation
Engaged independent cybersecurity experts to determine what happened
Reported the incident to law enforcement agencies, including the Federal Bureau of Investigation
Offering complimentary identity protection services through IDX
Changes made: Implemented additional measures to enhance the security of its digital environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Indiana State AGApr 8 · first

Montana State AGApr 8 · first · this page

HHS OCR+1d

California State AG+13d

New Hampshire State AG+14d

Massachusetts State AG+14d

Pattern: first filing Apr 8 (IN), last Apr 22 (MA) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Health-Notif.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 8, 2021
Raw hash: 267dd6c747155eed75d92a35cee04737946189b184866cccbb760d363f6aa715

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityHealth Center Partners of Southern California

Victim entityHealth Center Partners of Southern California

Incidentdiscovered Mar 8, 2021

Stated responseBrought all of its systems offline

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov