DisclosureLens
MARYLANDMalwareHealthcareHealthcareRansomwareCustomer Data InvolvedRansom DemandedData EncryptedHealth (basic)Identity (basic)Government IDHighResolved

Maryland Medical Center/Dr. Morrill

bd_16da7c3f2f823dbd · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 3, 2016

Filed

Dec 28, 2016

To disclose

8 weeks

Affected

10,000

Confidence

96%
Full breach record for Maryland Medical Center/Dr. Morrill →

On November 3, 2016, a cyber-attacker accessed Maryland Medical Center/Dr. Morrill's (MD) practice desktop computer system and deployed ransomware, denying access until a ransom was paid. Approximately 10,000 individuals were affected. Compromised data included patient names, dates of birth, and Social Security numbers contained in test-result correspondence. The CE recovered via backup, quarantined viruses, implemented network controls and device pre-approval procedures, and sanctioned the responsible employee. HHS OCR verified corrective actions. Submitted to HHS on 2016-12-28.

HIPAA clock✓ HHS report on time8 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 8 weeks / 55 days

Nov 3, 2016

Begins

Nov 3, 2016

Discovered

Dec 28, 2016

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed10,000 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.