Social EngineeringHealthcareHealthcarePhishingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)PHIHighContained

Moses Lake Community Health Center

bd_09742635de0acaa0 · schema v1 · pii pii-v1

Severity

High

Discovered

Sep 14, 2023

Filed

Jan 5, 2024

To disclose

16 weeks

Affected

1,189state residents only

Confidence

69%

Full breach record for Moses Lake Community Health Center →2 incidents on file

Moses Lake Community Health Center reported a phishing incident affecting two administrative email accounts. Unauthorized access occurred between July 26 and September 19, 2023. The breach exposed names, SSNs, DOBs, driver's licenses, and limited PHI for 1,189 individuals. The company engaged forensic investigators, reset passwords, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d16 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 50 days

discovery → filing · 16 weeks / 113 days

Jul 26, 2023

Begins

Sep 14, 2023

Discovered

Jan 5, 2024

Filed

vs. sector median

+4 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,189 affectedView incident

Name: Moses Lake Community Health Center
norm: moses lake community health center

Name: Moses Lake Community Health Center
norm: moses lake community health center
Industry: Healthcarellm

Discovered: Sep 14, 2023
Breach occurred: Jul 26, 2023 – Sep 19, 2023
Undetected for: 50 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 8, 2024
Affected individuals: 1,189state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Data elements: NameSocial Security numberDriver's licence numberDate of birthHealth insurance IDMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoing
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: provided written notice of this incident to relevant state regulators
Initial access: phishing_link

During the incident: Began mitigation efforts and review to determine the breadth and depth of this security breach
Secured our network, including but not limited to a system-wide password reset
Launched an investigation with the assistance of a third-party forensic firm
Provided access to credit monitoring services for twelve (12) months
Provided impacted individuals with guidance on how to better protect against identity theft and fraud
Changes made: Implemented and will continue to provide additional safeguards and training to its employees
Implemented additional defensive tools and increased monitoring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(113 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA27492.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 5, 2024
Raw hash: b2dd5401f327f700fb482657dfe5ad3ff8b06ae3b1b2651b2adc973c58bcc50d

Reporting entityMoses Lake Community Health Center

Victim entityMoses Lake Community Health Center

Incidentdiscovered Sep 14, 2023

Stated responseBegan mitigation efforts and review to determine the breadth and depth of this security breach

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com