MalwareHealthcareHealthcareRansomwareSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIdentity (basic)Health (basic)PHIMediumActive

Sight Partners Physicians, P.C.

bd_06e8576ba3ddca27 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 15, 2022

Filed

Jun 14, 2022

To disclose

9 weeks

Affected

83,848state residents only

Linked

3 filings

Confidence

70%

Full breach record for Sight Partners Physicians, P.C. →2 incidents on file

Sight Partners Physicians, P.C. notified Washington AG of a cyberattack on its former EHR vendor, ECL, affecting 83,848 Washington residents. The incident occurred on Dec 4, 2021, and was discovered on April 15, 2022. Patient PII and PHI were potentially exposed. ECL notified the FBI. Sight Partners provided 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d9 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 132 days

discovery → filing · 9 weeks / 60 days

Dec 4, 2021

Begins

Apr 15, 2022

Discovered

Jun 14, 2022

Filed

vs. sector median

2 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_04b226a35edaf0202022-06-14Verified
HHS OCRbd_4aa534e7734644262022-06-14Verified

Name: Sight Partners Physicians, P.C.
norm: sight partners physicians
Industry: Health

Name: Sight Partners Physicians, P.C.
norm: sight partners physicians
Industry: Health
Industry: Healthcarellm

Discovered: Apr 15, 2022
Breach occurred: Dec 4, 2021
Undetected for: 132 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 14, 2022
Affected individuals: 83,848state-resident count only
Data types: Identity (basic)Health (basic)PHI
Data elements: NameDate of birthMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 100-199dexposure 0d
WA-stated discovery: Found after the fact
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1486 Data Encrypted for Impact
Threat actor: External
Regulator citations: Notified law enforcement including the FBIProviding written notice to relevant state and federal regulatorsNotifying the U.S. Department of Health and Human Services
Third party: via ECL (Eye Care Leaders)
Initial access: supply_chain

During the incident: Providing access to credit monitoring services for twelve (12) months, through Experian
Established a dedicated toll-free assistance line
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this incident to relevant state and federal regulators
Notifying the three major credit reporting agencies, Equifax, Experian, and TransUnion
Notifying the U.S. Department of Health and Human Services and prominent media pursuant to HIPAA
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(60 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 2 states

View merged incident ↗

Montana State AGJun 14 · first

HHS OCRJun 14 · first

Washington State AGJun 14 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA12042.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 14, 2022
Raw hash: 81d1735ba370060dd1ceb3f2647dabe15100b1005c1a68d00587e96aabe69733

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entitySight Partners Physicians, P.C.

Victim entitySight Partners Physicians, P.C.

Incidentdiscovered Apr 15, 2022

Stated responseProviding access to credit monitoring services for twelve (12) months, through Experian

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com