Social EngineeringHealthcareHealthcarePhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)HighContained

Conway Medical Center

bd_072c1eb61bc29257 · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 7, 2019

Filed

Feb 27, 2020

To disclose

20 weeks

Affected

30,087state residents only

Confidence

64%

Full breach record for Conway Medical Center →2 incidents on file

Conway Medical Center notified patients and guarantors that an employee's email account was compromised via a phishing scam between Oct 4-7, 2019. Accessible data included names, SSNs, DOBs, CMC account numbers, and financial balances. CMC engaged a security firm, blocked access, reset passwords, and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due20 weeks discovery → filing

Incident timeline

undetected · 3 days

discovery → filing · 20 weeks / 143 days

Oct 4, 2019

Begins

Oct 7, 2019

Discovered

Feb 27, 2020

Filed

vs. sector median

+8 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed30,087 affectedView incident

Name: Conway Medical Center
norm: conway medical center
Domain: conwaymedicalcenter.com

Name: Conway Medical Center
norm: conway medical center
Domain: conwaymedicalcenter.com
Also named: Conway Hospital, Inc.dba oflegal entity
Conway Medical Centerdba oftrade name
Industry: Healthcarellm

Discovered: Oct 7, 2019
Breach occurred: Oct 4, 2019 – Oct 7, 2019
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 10, 2019
Affected individuals: 30,087state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: Social Security numberDate of birth
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Passwords were promptly changed
The unauthorized access was blocked
A computer security firm was engaged to investigate, mitigate, and evaluate the full nature and scope of any potential access to the contents of the email account
Offering you one (1) year of free credit monitoring and $1 million in identity theft insurance through Experian
Changes made: CMC is continuing to take steps to enhance its security measures to help prevent something like this from happening in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(143 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2020/ConwayMedical.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 27, 2020
Raw hash: 4a4181169016402ced5dbd41d320201611b2c4f56789680ccbefdde0cb0cb7a4

Reporting entityConway Medical Center

Victim entityConway Medical Center

Incidentdiscovered Oct 7, 2019

Stated responsePasswords were promptly changed

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov