Social EngineeringHealthcareHealthcarePhishingStolen CredentialsTargetedIdentity (basic)Health (basic)PHILowContained

Cancer Treatment Centers of America

bd_0b747654332cc4fc · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 26, 2018

Filed

Nov 26, 2018

To disclose

9 weeks

Affected

190state residents only

Linked

4 filings

Confidence

65%

Full breach record for Cancer Treatment Centers of America →7 incidents on file

CTCA notified Montana residents of a phishing attack on an employee's email account. Unauthorized access occurred on May 2, 2018. Data potentially exposed included names, addresses, DOB, and PHI. No SSN or financial data involved. Forensics retained; password reset and staff training implemented.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 147 days

discovery → filing · 9 weeks / 61 days

May 2, 2018

Begins

Sep 26, 2018

Discovered

Nov 26, 2018

Filed

vs. sector median

3 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

HHS OCRbd_5d788d3aa867f2612018-11-26Verified
California State AGbd_d318fb2f0442447e2018-11-27 · +1dVerified
Oregon State AGbd_d65fe7fed9d6adc92018-11-30 · +4dVerified by operator

Name: Cancer Treatment Centers of America
norm: cancer treatment centers of america
Domain: cancercenter.com
Industry: Healthcare

Name: Cancer Treatment Centers of America
norm: cancer treatment centers of america
Domain: cancercenter.com
Industry: Healthcare
Industry: Healthcarellm

Discovered: Sep 26, 2018
Breach occurred: May 2, 2018
Undetected for: 147 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 26, 2018
Affected individuals: 190state-resident count only
Data types: Identity (basic)Health (basic)PHI
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: phishing_link

During the incident: Opened an investigation
Retained a nationally recognized forensics firm to assist us in this matter
Changed the employee’s password at the direction of the CTCA Information Technology Department
Provided additional education to our workforce about how to identify suspicious emails
Changes made: Provided additional education to our workforce about how to identify suspicious emails
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(61 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

HHS OCRNov 26 · first

Montana State AGNov 26 · first · this page

California State AG+1d

Oregon State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Cancer-Treatment-Centers-of-America-CTCA.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 26, 2018
Raw hash: 450ed772143d582fa4a488c71d94c1b7342b44a0c16a8f459c4593ac4889922e

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityCancer Treatment Centers of America

Victim entityCancer Treatment Centers of America

Incidentdiscovered Sep 26, 2018

Stated responseOpened an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov