Social EngineeringHealthcareHealthcarePhishingCustomer Data InvolvedEmployee Data InvolvedPHIIdentity (basic)Government IDFinancial accountHealth (basic)MinorMediumContained

MEDNAX Services, Inc.

bd_11476f6352fa2626 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Dec 23, 2020

To disclose

—

Affected

Not disclosed

Linked

8 filings

Confidence

66%

Full breach record for MEDNAX Services, Inc. →2 incidents on file

MEDNAX Services, Inc. reported a data security event where an unauthorized third party accessed a Microsoft Office 365 business email account via phishing. The breach occurred between July 2 and July 3, 2020. Affected data may include patient contact information, Social Security numbers, health insurance details, medical records, and billing information. MEDNAX engaged a forensic firm, reset passwords, and offered one year of identity monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 2, 2020

Begins

Dec 23, 2020

Filed

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Massachusetts State AGbd_0556c2fd8b6abc362020-12-23Verified
California State AGbd_1253ca6eeacfa8792020-12-16 · +7dCandidate
HHS OCRbd_2317d15fb2fdc5372020-12-16 · +7dCandidate
Montana State AGbd_3c1d1683a865d9562020-12-16 · +7dVerified

Show 3 more filings ↓up to 20d gap

Oregon State AGbd_cc27b0970ea647262020-12-16 · +7dVerified
Washington State AGbd_ef1f98abb4d60c8e2020-12-16 · +7dVerified
New Hampshire State AGbd_c82e812b30165e942021-01-12 · +20dVerified

Name: MEDNAX Services, Inc.
norm: mednax services

Name: MEDNAX Services, Inc.
norm: mednax services
Industry: Healthcarellm

Discovered: —
Breach occurred: Jul 2, 2020 – Jul 3, 2020
Materiality determined: —
Notification sent: Dec 23, 2020
Affected individuals: Not disclosed
Data types: PHIIdentity (basic)Government IDFinancial accountHealth (basic)Minor
Data elements: Social Security numberDate of birthMedical information
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1114 Email Collection
Threat actor: External
Initial access: phishing_link

During the incident: Immediately took action to prevent any further unauthorized activity
Began an investigation
Engaged a national forensic firm
Resetting the user password for the business email account where unauthorized activity was detected
Changes made: Enhance our security controls as appropriate to minimize the risk of any similar event in the future
Offered identity monitoring services for a period of one year, at no cost
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 7 states

View merged incident ↗

California State AGDec 16 · first

HHS OCRDec 16 · first

Montana State AGDec 16 · first

Oregon State AGDec 16 · first

Washington State AGDec 16 · first

Massachusetts State AG+7d

California State AG+7d · this page

New Hampshire State AG+27d

Pattern: first filing Dec 16 (CA), last Jan 12 (NH) — a 27-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-197488
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 23, 2020
Raw hash: 94dd865a8a8f3078db178a265d66afabbd3236094fdeb0d1a3754eac4511410b

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityMEDNAX Services, Inc.

Victim entityMEDNAX Services, Inc.

IncidentPhishing

Stated responseImmediately took action to prevent any further unauthorized activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov