MalwareHealthcareHealthcareRansomwareData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPHIIdentity (basic)Government IDHealth (basic)MediumActive

Texas Tech University Health Sciences Center El Paso

bd_3106e65b82a37d05 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 29, 2024

Filed

Nov 13, 2025

To disclose

—

Affected

Not disclosed

Linked

10 filings

Confidence

64%

Full breach record for Texas Tech University Health Sciences Center El Paso →2 incidents on file

Texas Tech University Health Sciences Center El Paso notified the Maryland Attorney General of a cybersecurity event occurring between September 17 and 29, 2024. The incident involved unauthorized access to systems, resulting in the encryption of files and potential exfiltration of data. Potentially impacted information includes names, Social Security numbers, medical record numbers, and diagnosis information. The organization engaged third-party specialists for investigation and is offering credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 12 days

Sep 17, 2024

Begins

Sep 29, 2024

Discovered

Nov 13, 2025

Filed

This filing is one of 10 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Vermont State AGbd_0040ffb3f0c6210f2025-01-24 · +293dVerified
Nebraska State AGbd_4c1a9d4564dca0532025-01-24 · +293dCandidate
California State AGbd_76c123038b6dad6f2025-01-24 · +293dVerified
Oregon State AGbd_799286e0b88dfe1a2025-01-24 · +293dVerified

Show 5 more filings ↓up to 316d gap

Indiana State AGbd_aef8eb90b7582a7e2025-01-24 · +293dVerified
Washington State AGbd_ddcc2fb37db7a4f02025-01-24 · +293dVerified
Montana State AGbd_e288accf42169c282025-01-24 · +293dVerified
Illinois State AGbd_3bbe9090b3dbfd5a2025-01-01 · +316dVerified
Illinois State AGbd_7415a0b6b783de9e2025-01-01 · +316dVerified by operator

Name: Mullen Law
norm: mullen law

Name: Texas Tech University Health Sciences Center El Paso
norm: texas tech university health sciences center el paso
Industry: healthcare
Industry: Healthcarellm

Discovered: Sep 29, 2024
Breach occurred: Sep 17, 2024 – Sep 29, 2024
Undetected for: 12 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 24, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDHealth (basic)
Data elements: Social Security numberMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified the Maryland Office of the Attorney General
Initial access: valid_credentials

During the incident: Took steps to ensure the security of the TTUHSC EP network
Began an investigation with the assistance of third-party specialists
Conducted a detailed review of the systems
Offered access free of charge to 12/24 months of credit monitoring and identity restoration services through IDX
Changes made: Reviewing the policies and procedures of security existing and applying additional safeguards to improve the protection and monitoring of the system
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 9 states

View merged incident ↗

Illinois State AGJan 1 · first

Vermont State AG+23d

Nebraska State AG+23d

California State AG+23d

Oregon State AG+23d

Indiana State AG+23d

Washington State AG+23d

Montana State AG+23d

Maryland State AG+316d · this page

Pattern: first filing Jan 1 (IL), last Nov 13 (MD) — a 316-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376244.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 13, 2025
Raw hash: a60dd02564fa9ba9b8b91d66211b490f0bbe27af75157dc7afaebb72d26437b0

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityMullen Law

Victim entityTexas Tech University Health Sciences Center El Paso

Incidentdiscovered Sep 29, 2024

Stated responseTook steps to ensure the security of the TTUHSC EP network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov