HackingHealthcareHealthcareStolen CredentialsData ExfiltratedPIIPHIHealth (basic)LowContained

Risas Dental & Braces

bd_25b5fe623aa1a1e9 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 10, 2023

Filed

Mar 28, 2023

To disclose

—

Affected

46state residents only

Confidence

66%

Full breach record for Risas Dental & Braces →2 incidents on file

Risas Holdings LLC (d/b/a Risas Dental & Braces) notified Montana residents of a security incident discovered on July 10, 2023. Unauthorized access resulted in the download of files containing PHI and PII (names, contact info, treatment notes, insurance info). No SSNs or detailed treatment records were involved. The company engaged forensic experts, reported to the FBI, and implemented additional security measures. Notifications were sent on January 26, 2024.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window not drawn

Mar 28, 2023

Filed

No interval is drawn: the discovery date on record falls after this filing's date.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed46 affectedView incident

Name: Risas Dental & Braces
norm: risas dental braces

Name: Risas Dental & Braces
norm: risas dental braces
Also named: Risas Holdings LLCoperating subsidiary ofholding company
Industry: Healthcarellm

Discovered: Jul 10, 2023
Materiality determined: —
Notification sent: Jan 26, 2024
Affected individuals: 46state-resident count only
Data types: PIIPHIHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: reported the incident to the Federal Bureau of Investigation
Initial access: valid_credentials

During the incident: Took measures to secure our network, systems, and data
Enlisted the assistance of independent cybersecurity experts to conduct a forensic investigation
Completed a comprehensive review of all affected information
Reported the incident to the Federal Bureau of Investigation
Changes made: Implemented additional security measures to protect our digital environment
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1229.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 28, 2023
Raw hash: 0b14973be38c39df502606cbabb6ba5d734074d10301a555cba7517b4aff1327

Reporting entityRisas Dental & Braces

Victim entityRisas Dental & Braces

Incidentdiscovered Jul 10, 2023

Stated responseTook measures to secure our network, systems, and data

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov