MalwareHealthcareHealthcareRansomwareRansom DemandedData EncryptedIdentity (basic)Government IDHealth (basic)PHIMediumContained

Cove Family and Sports Medicine, LLC

bd_13921944df793e42 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 14, 2017

Filed

Jun 12, 2017

To disclose

8 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Cove Family and Sports Medicine, LLC →

Cove Family & Sports Medicine notified patients of a ransomware incident on April 14, 2017, which encrypted electronic medical software containing patient records. The organization did not pay the ransom, restored systems from backup, and notified patients. Data included names, DOBs, SSNs, addresses, and medical records. No exfiltration was detected.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 59 days

Apr 14, 2017

Begins

Apr 14, 2017

Discovered

Jun 12, 2017

Filed

vs. sector median

4 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_b0eb421971c2ca362017-06-12Verified

Name: Cove Family and Sports Medicine, LLC
norm: cove family and sports medicine

Name: Cove Family and Sports Medicine, LLC
norm: cove family and sports medicine
Industry: Healthcarellm

Discovered: Apr 14, 2017
Breach occurred: Apr 14, 2017
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 13, 2017
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial

During the incident: Removed the virus by reinstalling the operating system on our server
Restored the majority of our patient records from backup copies
Conducted subsequent scans of our computer system
Sent notification letters to affected individuals
Established a dedicated, toll-free incident response hotline
Changes made: Reinstalled operating system to remove ransomware
Restored patient records from backup copies
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(59 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

HHS OCRJun 12 · first

Montana State AGJun 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Cove-Family-Sports-Medicine.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 12, 2017
Raw hash: 789d49483b75c88f2f4e080d4f33a3cc26ed21a69d772844421524861e1a9002

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityCove Family and Sports Medicine, LLC

Victim entityCove Family and Sports Medicine, LLC

Incidentdiscovered Apr 14, 2017

Stated responseRemoved the virus by reinstalling the operating system on our server

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov