MalwareHealthcareHealthcareRansomwareData EncryptedData ExfiltratedRansom DemandedIdentity (basic)Government IDHealth (basic)PHIMediumContained

Lorien Health Services

bd_0edd2bc98e289201 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 6, 2020

Filed

Jul 16, 2020

To disclose

6 weeks

Affected

1state residents only

Linked

4 filings

Confidence

66%

Full breach record for Lorien Health Services →

Lorien Health Services notified Montana residents of a June 2020 ransomware incident where network data was encrypted and resident admission forms (including SSNs, DOBs, and PHI) were accessed. The company engaged cybersecurity experts, notified the FBI, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 40 days

Jun 6, 2020

Discovered

Jul 16, 2020

Filed

vs. sector median

7 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitenetwalkerbd_704e1d2d1c81fd7d2020-06-06 · +40dCandidate

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_34505613283bfe092020-07-16Candidate
Massachusetts State AGbd_9828f1cc108928792020-07-16Verified

Name: Lorien Health Services
norm: lorien health

Name: Lorien Health Services
norm: lorien health
Industry: Healthcarellm

Discovered: Jun 6, 2020
Materiality determined: —
Notification sent: Jul 16, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of Investigation

During the incident: Engaged a team of cybersecurity experts to assist with our response
Notified the Federal Bureau of Investigation
Offering identity monitoring and recovery services for 12 months through IDExperts
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGJul 16 · first

Massachusetts State AGJul 16 · first

Montana State AGJul 16 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Lorien-Health-Services-Consumer-ltr.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 16, 2020
Raw hash: 7a14e11ed88b190bb897d51dba9e22d4a7e41dfdb85261136a09721fe89967fa

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityLorien Health Services

Victim entityLorien Health Services

Incidentdiscovered Jun 6, 2020

Stated responseEngaged a team of cybersecurity experts to assist with our response

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov