HackingProfessional ServicesProfessional ServicesVulnerability ExploitTargetedFinancial accountFinancial credentialsLowContained

American Society for Clinical Pathology

bd_2e4a4fe0820ab0af · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Apr 1, 2021

To disclose

—

Affected

114state residents only

Linked

8 filings

Confidence

67%

Full breach record for American Society for Clinical Pathology →

American Society for Clinical Pathology (ASCP) notified Montana AG of a cybersecurity attack on its e-commerce website (WWW.aSCPp.Org) that potentially exposed payment card data (name, card number, expiration, CVV) entered by customers. ASCP engaged forensic investigators, resolved the issue, and implemented additional security safeguards. No evidence of misuse was found.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Apr 1, 2021

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Indiana State AGbd_8246d19f98183f762021-04-01Verified
Washington State AGbd_0068d4a7a36ff7b72021-04-07 · +6dVerified by operator
California State AGbd_50dbb9c8e5101fcf2021-04-07 · +6dVerified
Massachusetts State AGbd_ae4d677d9170ca6d2021-04-07 · +6dVerified

Show 3 more filings ↓up to 40d gap

Maine State AGbd_cb2b3e87c8a69a2e2021-04-07 · +6dVerified by operator
New Hampshire State AGbd_1c56d6fdb347f2912021-04-12 · +11dVerified
Oregon State AGbd_1a1b74d201b159d82021-05-11 · +40dVerified by operator

Name: American Society for Clinical Pathology
norm: american society for clinical pathology
Domain: ascp.org

Name: American Society for Clinical Pathology
norm: american society for clinical pathology
Domain: ascp.org
Industry: Professional Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Mar 11, 2021
Affected individuals: 114state-resident count only
Data types: Financial accountFinancial credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Engaged external forensic investigators and data privacy professionals
Conducted a thorough investigation into the incident
Resolved the issue that led to the potential exposure on the website
Implemented additional security safeguards to protect against future intrusions
Continue ongoing intensive monitoring of our website
Changes made: Implemented additional security safeguards to protect against future intrusions
Continue ongoing intensive monitoring of our website
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Indiana State AGApr 1 · first

Montana State AGApr 1 · first · this page

Washington State AG+6d

California State AG+6d

Massachusetts State AG+6d

Maine State AG+6d

New Hampshire State AG+11d

Oregon State AG+40d

Pattern: first filing Apr 1 (IN), last May 11 (OR) — a 40-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/a-notif-62.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 1, 2021
Raw hash: ae1e11db1737053cef340fa1e7958f1393d1469a7a606fdf69d82a6d189f4192

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityAmerican Society for Clinical Pathology

Victim entityAmerican Society for Clinical Pathology

IncidentUnauthorized Access

Stated responseEngaged external forensic investigators and data privacy professionals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov