MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained

Orthopedic Associates of Hawaii

bd_29d98239dc73874c · schema v1 · pii pii-v1

Full breach record for Orthopedic Associates of Hawaii →

Orthopedic Associates of Hawaii (d/b/a Minimally Invasive Surgery of Hawaii) disclosed a ransomware incident in February 2021. Systems were encrypted between Feb 12-19, 2021. An unknown actor accessed systems and downloaded limited data, including names, DOBs, SSNs, and health info. The Practices restored systems, notified law enforcement and HHS, and offered credit monitoring. No evidence of misuse was found.

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Source provenance

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-550962
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 15, 2022
Raw hash: 444fa2c6e3bbcae7aceeab278b5d26b48a587e58ebc37f0adaf27150b04f5405

Reporting entity

Name: Orthopedic Associates of Hawaii
norm: orthopedic associates of hawaii

Victim entity

Name: Orthopedic Associates of Hawaii
norm: orthopedic associates of hawaii

Incident

Discovered: Feb 19, 2021
Materiality determined: —
Notification sent: Feb 15, 2021
Affected individuals: Not disclosed
Data types: IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: notified federal law enforcementnotified the U.S. Department of Health and Human Servicesnotified other government regulators

Compliance

Time to disclose: 52 weeks(361 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.