MalwareTechnologyHealthcareInformationIdentity (basic)Government IDHealth (basic)Financial accountCredentialsAuthenticationMediumContained

Professional Business Systems, Inc.

bd_16c2261ae907270f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 30, 2020

Filed

Jul 1, 2021

To disclose

26 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

68%

Full breach record for Professional Business Systems, Inc. →

Professional Business Systems, d/b/a Practicefirst Medical Management Solutions, notified Montana residents of a December 30, 2020 ransomware incident. The actor attempted to encrypt systems but copied patient and employee files containing PII, PHI, and financial data before deletion. Practicefirst shut down systems, alerted law enforcement, and offered two years of Kroll identity monitoring. No misuse was found.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 26 weeks / 183 days

Dec 30, 2020

Discovered

Jul 1, 2021

Filed

vs. sector median

+8 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Maine State AGbd_0106ed492c5ece372021-07-01Verified
HHS OCRbd_635dc79d7d64eeb62021-07-01Verified
California State AGbd_6ae8ca48588440d52021-07-01Verified
Massachusetts State AGbd_b8dc597087b04e672021-07-01Verified

Show 2 more filings ↓up to 181d gap

New Hampshire State AGbd_417756b2a81e6a452021-07-06 · +5dVerified
Illinois State AGbd_d5463f3d3b1aa5252021-01-01 · +181dCandidate

Name: Professional Business Systems, Inc.
norm: professional business

Name: Professional Business Systems, Inc.
norm: professional business
Industry: TechnologyllmHealthcarellm

Discovered: Dec 30, 2020
Materiality determined: —
Notification sent: Jun 30, 2021
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDHealth (basic)Financial accountCredentialsAuthentication
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Reported the Incident to appropriate law enforcement authoritiesReported this Incident to relevant government agencies
Initial access: exploit_public_facing

During the incident: Shut down our systems
Changed passwords
Alerted law enforcement
Retained national privacy and security experts
Worked with a leading privacy and security firm to aid in our investigation and response
Reported this Incident to relevant government agencies
Implemented additional security protocols designed to protect our network, email environment, and systems
Changes made: Implemented additional security protocols designed to protect our network, email environment, and systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 weeks(183 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Illinois State AGJan 1 · first

Maine State AG+181d

HHS OCR+181d

California State AG+181d

Massachusetts State AG+181d

Montana State AG+181d · this page

New Hampshire State AG+186d

Pattern: first filing Jan 1 (IL), last Jul 6 (NH) — a 186-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/pbsSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 1, 2021
Raw hash: 0254058e5432d969fa46f2d9a3d4f553aff29e14ce84626521eaeed0fd01b69a

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityProfessional Business Systems, Inc.

Victim entityProfessional Business Systems, Inc.

Incidentdiscovered Dec 30, 2020

Stated responseShut down our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov