Social EngineeringHealthcareHealthcarePhishingTargetedPIIIdentity (basic)Government IDEmploymentMediumContained

Campbell County Health

bd_1e20a62ee9eee234 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 25, 2017

Filed

Jan 27, 2017

To disclose

2 days

Affected

6state residents only

Confidence

66%

Full breach record for Campbell County Health →

Campbell County Health notified employees that on January 25, 2017, an unauthorized individual impersonated an executive to fraudulently obtain W-2 files containing names, SSNs, and compensation data. The incident involved social engineering (phishing) with no unauthorized network access. The organization contacted law enforcement and offered two years of identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 2 days

Jan 25, 2017

Begins

Jan 25, 2017

Discovered

Jan 27, 2017

Filed

vs. sector median

12 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed6 affectedView incident

Name: Campbell County Health
norm: campbell county health

Name: Campbell County Health
norm: campbell county health
Industry: Healthcarellm

Discovered: Jan 25, 2017
Breach occurred: Jan 25, 2017
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 6state-resident count only
Data types: PIIIdentity (basic)Government IDEmployment
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Contacted law enforcement
Initial access: phishing_link

During the incident: Contacted law enforcement and will continue to cooperate in their investigation
Offering two years of complimentary identity protection services from a leading identity monitoring services company
Adding to annual training to employees information about the proper use of sensitive information and how to recognize email scams
Changes made: Adding to annual training to employees information about the proper use of sensitive information and how to recognize email scams
Providing periodic updates to employees throughout the year as new phishing schemes or email scams come to our attention
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 2 days(2 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Campbell-County-Health.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 27, 2017
Raw hash: 449ff0c37fa1343896c3027127fab55717b9fbcf99ae59fbdf46771975cb731c

Reporting entityCampbell County Health

Victim entityCampbell County Health

Incidentdiscovered Jan 25, 2017

Stated responseContacted law enforcement and will continue to cooperate in their investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov