HackingHealthcareHealthcareSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
Entira Family Clinics
bd_3044d05610370199 · schema v1 · pii pii-v1
Full breach record for Entira Family Clinics →Entira Family Clinics, a Minnesota-based family medicine practice, notified patients of a data security incident involving its third-party hosting and cloud IT provider, Netgain. An unauthorized party accessed Netgain's environment, potentially exposing patient name, address, Social Security number, and medical history. The breach date recorded is December 4, 2020; notice letters were sent in January 2022. Affected individuals were offered free IDX credit monitoring.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_f776c0fa04116907Maine State AGfiled 2022-01-13Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-549954
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 13, 2022
- Raw hash
- ffd0019b3cd09baf5a89b3d276ca675909a89d9fa471f021bc64c54f3f3e6f18
Reporting entity
- Name
- Entira Family Clinicsnorm: entira family clinics
- Domain
- entirafamilyclinics.com
Victim entity
- Name
- Entira Family Clinicsnorm: entira family clinics
- Domain
- entirafamilyclinics.com
- Industry
- family medicine / healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1530 Data from Cloud Storage Object
- Threat actor
- External
- Third party
- via Netgain
- Initial access
- supply_chain
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.