Orchard Medical Consulting
bd_1b27f272c568e797 · schema v1 · pii pii-v1
Full breach record for Orchard Medical Consulting →Orchard Medical Consulting disclosed that an unauthorized individual gained access to a single employee's email account on January 16, 2020, which was discovered on January 30, 2020. The incident potentially exposed personal information, including names, dates of birth, Social Security numbers, and limited medical information (PHI) such as diagnoses and treatment plans. The company contained the incident, reported it to regulators, and offered one year of credit monitoring to affected individuals. Remediation steps included implementing multi-factor authentication and forcing password changes.
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_51b86a0c0572de64Montana State AGfiled 2020-05-05(23d gap)Candidate
- bd_87bc5e0a982a7c95California State AGfiled 2020-05-05(23d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-190458
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 28, 2020
- Raw hash
- 7c3fd0a96e79353ffd27d4e652fcd3778ebdc80ec0dc46e50f1b34a6feff08eb
Reporting entity
- Name
- Orchard Medical Consultingnorm: orchard medical consulting
Victim entity
- Name
- Orchard Medical Consultingnorm: orchard medical consulting
Incident
- Discovered
- Jan 30, 2020
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Reported this incident to the appropriate government regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 17 weeks(119 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.