HackingHealthcareProfessional ServicesHealthcareStolen CredentialsCapture Stored DataData ExfiltratedTargetedIdentity (basic)Government IDFinancial accountHealth (basic)PHIMediumContained

Redwood Coast Regional Center

bd_2edbb7969dd98f4b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 6, 2024

Filed

Nov 4, 2024

To disclose

35 weeks

Affected

8state residents only

Linked

7 filings

Confidence

66%

Full breach record for Redwood Coast Regional Center →2 incidents on file

Redwood Coast Regional Center notified Montana AG of a March 6, 2024 incident where an unauthorized individual acquired PII including SSNs, PHI, and financial data. Investigation completed Sept 2024. No evidence of misuse. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 35 weeks / 243 days

Mar 6, 2024

Begins

Mar 6, 2024

Discovered

Nov 4, 2024

Filed

vs. sector median

+24 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitelockbit_3bd_03de47509ae2333f2024-03-06 · +243dVerified by operator
Leak Sitelockbit_3bd_fd59e0ea2acf9bf92024-03-05 · +244dVerified

Regulatory filings (4) · sorted by filing gap

California State AGbd_d2aee317976d4d8f2024-11-04Verified by operator
Vermont State AGbd_06c33aec61c448f22024-11-05 · +1dVerified by operator
Massachusetts State AGbd_737cab0aae297e152024-11-05 · +1dVerified by operator
HHS OCRbd_9b23af0a82f7e2722024-05-03 · +185dVerified

Name: Redwood Coast Regional Center
norm: redwood coast regional center
Domain: redwoodcoastrc.org

Name: Redwood Coast Regional Center
norm: redwood coast regional center
Domain: redwoodcoastrc.org
Industry: HealthcarellmProfessional Servicesllm

Discovered: Mar 6, 2024
Breach occurred: Mar 6, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 8state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PHI
Data elements: Date of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Took immediate steps to secure our network
Engaged third-party specialists to assist in an investigation
Implemented additional technical safeguards
Providing access to twelve (12) months of credit monitoring and identity protection services
Changes made: Implemented additional technical safeguards to further enhance the security of information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 35 weeks(243 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

HHS OCRMay 3 · first

California State AG+185d

Montana State AG+185d · this page

Vermont State AG+186d

Massachusetts State AG+186d

Pattern: first filing May 3 (CA), last Nov 5 (MA) — a 186-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2024/11/Consumer-notification-letter-24.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 4, 2024
Raw hash: fb8a461dda5ba8e2dcf6613d6a2f024f59a614621f8187351aa1d7404227d226

Linked disclosures

Ransomware claims (2)

Regulatory filings (4) · sorted by filing gap

Reporting entityRedwood Coast Regional Center

Victim entityRedwood Coast Regional Center

Incidentdiscovered Mar 6, 2024

Stated responseTook immediate steps to secure our network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov