HackingHealthcareOtherHealthcareStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)HighContained

Elmcroft Senior Living, Inc.

bd_168183e6da0cf169 · schema v1 · pii pii-v1

Severity

High

Discovered

May 12, 2018

Filed

Jun 27, 2018

To disclose

7 weeks

Affected

1,037state residents only

Linked

7 filings

Confidence

65%

Full breach record for Elmcroft Senior Living, Inc. →

Elmcroft Senior Living, Inc. disclosed that an unauthorized third party accessed its Louisville, KY servers on May 10, 2018, exposing personal and health information including SSNs. The incident was discovered on May 12, 2018. Affected individuals were offered one year of identity monitoring through Kroll.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due7 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 2 days

discovery → filing · 7 weeks / 46 days

May 10, 2018

Begins

May 12, 2018

Discovered

Jun 27, 2018

Filed

vs. sector median

6 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Delaware State AGbd_121717ac4f1810f72018-06-08 · +19dVerified
Massachusetts State AGbd_329bab0b9ea627d92018-06-08 · +19dVerified
New Hampshire State AGbd_8e328f0860b758102018-06-08 · +19dVerified
Montana State AGbd_8f5f94f192c567b32018-06-08 · +19dVerified

Show 2 more filings ↓up to 37d gap

California State AGbd_56453ba7eacccb442018-06-01 · +26dVerified
HHS OCRbd_67168058419f205b2018-05-21 · +37dVerified

Name: Elmcroft Senior Living, Inc.
norm: elmcroft senior living

Name: Elmcroft Senior Living, Inc.
norm: elmcroft senior living
Industry: HealthcarellmOtherllm

Discovered: May 12, 2018
Breach occurred: May 10, 2018
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1,037state-resident count only
Data types: Identity (basic)Government IDHealth (basic)
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: notified local and federal law enforcement agencies
Initial access: valid_credentials

During the incident: Terminated the third party’s unauthorized access
Initiated an Investigation
Notified local and federal law enforcement agencies
Cooperating with those entities as they investigate this Incident
Secured the services of Kroll to provide identity monitoring at no cost to you for one year
Changes made: Monitor our computer system for unauthorized access
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(46 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

HHS OCRMay 21 · first

California State AG+11d

Delaware State AG+18d

Massachusetts State AG+18d

New Hampshire State AG+18d

Montana State AG+18d

South Carolina State AG+37d · this page

Pattern: first filing May 21 (TX), last Jun 27 (SC) — a 37-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2018/ElmcroftSeniorLivingInc..pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 27, 2018
Raw hash: 5472c255a5f270797dc87cb370ad89d27309a7825f0e08735462a41febc5a50b

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityElmcroft Senior Living, Inc.

Victim entityElmcroft Senior Living, Inc.

Incidentdiscovered May 12, 2018

Stated responseTerminated the third party’s unauthorized access

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov