MalwareHealthcareHealthcareRansomwareData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)PHIFinancial accountMinorMediumActive

Youth Eastside Services

bd_278649bd8af7ed7e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 13, 2024

Filed

Dec 20, 2024

To disclose

5 weeks

Affected

755state residents only

Linked

3 records

Confidence

69%

Full breach record for Youth Eastside Services →

Youth Eastside Services (YES) reported a supplemental data breach to the Washington AG on Feb 5, 2025. An unknown actor accessed systems Nov 13-14, 2024, exfiltrating PHI, SSNs, and financial data. 755 WA residents notified. Ransomware involved. Investigation ongoing.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d5 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 5 weeks / 37 days

Nov 13, 2024

Begins

Nov 13, 2024

Discovered

Dec 20, 2024

Filed

vs. sector median

4 wks faster

This filing is one of 3 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteinc_ransombd_09267de488d85cc52024-11-13 · +37dVerified

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_9728bda28ba748352024-12-20Verified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Youth Eastside Services
norm: youth eastside services
Domain: youtheastsideservices.org
Industry: Healthcarellm

Discovered: Nov 13, 2024
Breach occurred: Nov 13, 2024 – Nov 14, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 5, 2025
Affected individuals: 755state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHIFinancial accountMinor
Data elements: NameSocial Security numberDate of birthMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoing
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial

During the incident: Commenced an investigation with the assistance of third-party cybersecurity specialists
Implemented additional security measures
Offering you access to credit monitoring and identity restoration assistance services for 12 months through Experian at no cost to you
Changes made: Implemented additional security measures
Working to implement additional safeguards
Reviewing relevant policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(37 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

HHS OCRDec 20 · first

Washington State AGDec 20 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA31765.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 20, 2024
Raw hash: 8dd092559d6363037a9145f9a105494e10e0c049932ccf83ff80d0896b395e1c

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityYouth Eastside Services

Incidentdiscovered Nov 13, 2024

Stated responseCommenced an investigation with the assistance of third-party cybersecurity specialists

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com