MalwareHealthcareHealthcareRansomwareData EncryptedTargetedIdentity (basic)Government IDHealth (basic)PHIMediumContained

Centrelake Medical Group, Inc.

bd_2f595599bea258d2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 19, 2019

Filed

Apr 16, 2019

To disclose

8 weeks

Affected

8state residents only

Linked

6 filings

Confidence

65%

Full breach record for Centrelake Medical Group, Inc. →2 incidents on file

Centrelake Medical Group, Inc. notified patients of a data incident where an unknown third party gained access to servers containing PHI and PII. Suspicious activity occurred from Jan 9, 2019, to Feb 19, 2019, when a virus infected the system. Data types included names, SSNs, driver's licenses, and medical records. No evidence of misuse was found. Kroll provided identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 41 days

discovery → filing · 8 weeks / 56 days

Jan 9, 2019

Begins

Feb 19, 2019

Discovered

Apr 16, 2019

Filed

vs. sector median

4 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

HHS OCRbd_4d4ab4bdac39256b2019-04-16Verified
California State AGbd_5a79055f0c129f242019-04-16Verified
Massachusetts State AGbd_95491b3edc63f1312019-04-16Verified
New Hampshire State AGbd_e9c07bcc541493352019-04-22 · +6dVerified

Show 1 more filing ↓up to 29d gap

California State AGbd_1e7f4398452ebdf42019-05-15 · +29dVerified

Name: Centrelake Medical Group, Inc.
norm: centrelake medical

Name: Centrelake Medical Group, Inc.
norm: centrelake medical
Industry: Healthcarellm

Discovered: Feb 19, 2019
Breach occurred: Jan 9, 2019 – Feb 19, 2019
Undetected for: 41 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 16, 2019
Affected individuals: 8state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: External
Regulator citations: providing notification to required regulators

During the incident: Launched an investigation, with the assistance of third-party forensics
Worked to restore its information system
Established a toll-free privacy line
Providing notification to impacted patients and business partners
Providing notification to required regulators
Securing the services of Kroll to provide identity monitoring
Changes made: Reviewing its processes, policies, and procedures that address data privacy
Enhancing the security of our information system to mitigate the risk an incident like this will occur in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(56 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 4 states

View merged incident ↗

HHS OCRApr 16 · first

California State AGApr 16 · first

Massachusetts State AGApr 16 · first

Montana State AGApr 16 · first · this page

New Hampshire State AG+6d

California State AG+29d

Pattern: first filing Apr 16 (CA), last May 15 (CA) — a 29-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/CON-Centrelake-Medical-Group-Notice-of-Data-Event-MT.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 16, 2019
Raw hash: 883a31063768215494e4725f9247391ed7e050521dac2dc84b7a926bd5dfa60f

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityCentrelake Medical Group, Inc.

Victim entityCentrelake Medical Group, Inc.

Incidentdiscovered Feb 19, 2019

Stated responseLaunched an investigation, with the assistance of third-party forensics

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov