Social EngineeringHealthcareProfessional ServicesHealthcarePhishingStolen CredentialsTargetedPIIIdentity (basic)LowContained

Accountable Healthcare Staffing

bd_132ea31f0ca04bb1 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 5, 2024

Filed

Jul 31, 2024

To disclose

25 weeks

Affected

2state residents only

Linked

5 filings

Confidence

66%

Full breach record for Accountable Healthcare Staffing →2 incidents on file

Accountable Healthcare Staffing, Inc. notified Montana residents of unauthorized access to an employee email account between Jan 31 and Feb 2, 2024. The breach, discovered on Feb 5, 2024, involved an unknown actor viewing/downloading data via compromised credentials. Affected data included names and other PII. The company engaged forensic specialists and offers credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 5 days

discovery → filing · 25 weeks / 177 days

Jan 31, 2024

Begins

Feb 5, 2024

Discovered

Jul 31, 2024

Filed

vs. sector median

+14 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

New Hampshire State AGbd_0d4dab1a8fef00d12024-07-31Verified
Massachusetts State AGbd_2537986df5686b0c2024-07-31Verified
Vermont State AGbd_c167a2c21322d6bb2024-07-31Verified
Maine State AGbd_f6bafe20e9c814372024-07-31Verified

Name: Accountable Healthcare Staffing
norm: accountable healthcare staffing
Domain: ahcstaff.com

Name: Accountable Healthcare Staffing
norm: accountable healthcare staffing
Domain: ahcstaff.com
Industry: HealthcarellmProfessional Servicesllm

Discovered: Feb 5, 2024
Breach occurred: Jan 31, 2024 – Feb 2, 2024
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: phishing_link

During the incident: Took steps to secure the email account
Launched an extensive investigation with the assistance of third-party forensic specialists
Initiated a comprehensive incident response
Reviewed security policies and procedures
Enhancing security measures
Offering access to credit monitoring and identity restoration services for [CM Length] months at no cost through Epiq
Changes made: Reviewed security policies and procedures
Enhancing security measures to reduce the risk of similar future events
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(177 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

New Hampshire State AGJul 31 · first

Massachusetts State AGJul 31 · first

Vermont State AGJul 31 · first

Maine State AGJul 31 · first

Montana State AGJul 31 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-841.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 31, 2024
Raw hash: c2ef7e89d6dc255c3097588e588ad621a562457e87a4bf2b88b605a2d6f72736

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityAccountable Healthcare Staffing

Victim entityAccountable Healthcare Staffing

Incidentdiscovered Feb 5, 2024

Stated responseTook steps to secure the email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov