MalwareHealthcareHealthcareRansomwareData EncryptedRansom DemandedPHIHealth (basic)Government IDIdentity (basic)MediumContained

Family Vision of Anderson

bd_2641be88c2200e5a · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 22, 2023

Filed

Jul 26, 2023

To disclose

9 weeks

Affected

1state residents only

Linked

5 filings

Confidence

65%

Full breach record for Family Vision of Anderson →

Family Vision of Anderson, P.A. disclosed a ransomware incident where unauthorized third parties encrypted the practice's server on May 21, 2023. The breach compromised PHI, including SSNs, driver's licenses, and medical records. The practice notified the Secret Service, HHS OCR, and offered credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 9 weeks / 65 days

May 21, 2023

Begins

May 22, 2023

Discovered

Jul 26, 2023

Filed

vs. sector median

3 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_41dd9378fe1e409f2023-07-26Verified
Massachusetts State AGbd_67a71558f1a431542023-07-26Verified
South Carolina State AGbd_ac69d64f3136078e2023-07-27 · +1dVerified
HHS OCRbd_5889c9add30c8d912023-07-25 · +1dVerified

Name: Family Vision of Anderson
norm: family vision of anderson

Name: Family Vision of Anderson
norm: family vision of anderson
Industry: Healthcarellm

Discovered: May 22, 2023
Breach occurred: May 21, 2023
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Jul 26, 2023
Affected individuals: 1state-resident count only
Data types: PHIHealth (basic)Government IDIdentity (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Reported the incident to the United States Secret ServiceReporting the incident to the U.S. Department of Health and Human Services Office for Civil Rights

During the incident: Disabled access to our systems
Launched an investigation to determine what happened and the extent of the incident
Notified law enforcement
Reported the incident to the United States Secret Service
Reporting the incident to the U.S. Department of Health and Human Services Office for Civil Rights
Offering identity theft protection services through IDX
Changes made: Providing additional staff training
Revisiting our policies and procedures and security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(65 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

HHS OCRJul 25 · first

Maine State AG+1d

Massachusetts State AG+1d

Montana State AG+1d · this page

South Carolina State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-474.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 26, 2023
Raw hash: 133bdcccc1ad3c0f8079de3afdf4063f37c7e4bf65c0dd8af01113f18a5a239d

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityFamily Vision of Anderson

Victim entityFamily Vision of Anderson

Incidentdiscovered May 22, 2023

Stated responseDisabled access to our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov