Doctors' Management Service, Inc
bd_2817736d1e5cea71 · schema v1 · pii pii-v1
Full breach record for Doctors' Management Service, Inc →2 incidents on fileDoctors' Management Service, Inc. notified the NH AG of a ransomware incident involving GandCrab malware. Initial access occurred via RDP on April 1, 2017, but was not discovered until December 24, 2018. Five NH residents (doctors) were impacted, with credentialing info (SSN, name, address) and potential PHI exposed. Data was encrypted but restored from backups; no ransom paid. Identity theft protection offered.
J jump to incidentP pin to compareR raw source
Incident timeline
Apr 1, 2017
Begins
Dec 24, 2018
Discovered
May 28, 2019
Filed
vs. sector median
+10 wks slower
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Oregon State AGbd_525d9e853fad41d72019-04-24 · +34dVerified
- Massachusetts State AGbd_31de1d03468648ee2019-04-23 · +35dVerified
- Montana State AGbd_1d84cc65754441c12019-04-22 · +36dVerified
- HHS OCRbd_93af1e4de88761ea2019-04-22 · +36dVerified
Show 1 more filing ↓Show fewer ↑up to 1617d gap
- HHS OCR enforcementbd_928833438d5c3c322023-10-31 · +1617dVerified by operator
Filing propagation · 6 filings · 4 states
View merged incident ↗Pattern: first filing Apr 22 (MT), last Oct 31 — a 1653-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.