PENNSYLVANIASocial EngineeringHealthcareHealthcarePhishingCustomer Data InvolvedPHIHealth (basic)Identity (basic)LowContained

Charles Cole Memorial Hospital

bd_35df171af044571a · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 7, 2018

Filed

Jul 13, 2018

To disclose

5 weeks

Affected

790

Confidence

67%

Full breach record for Charles Cole Memorial Hospital →2 incidents on file

Charles Cole Memorial Hospital reported to HHS on 2018-07-13 a Hacking/IT Incident affecting 790 individuals. Breached information located on Email. As the result of a phishing attack, unauthorized users accessed three email accounts containing PHI of 790 individuals between June 7 and June 14, 2018. There was no evidence that the emails containing the PHI were actually accessed.

J jump to incidentP pin to compareR raw source

HIPAA clockDiscovered Jun 7, 2018 → Notified Jul 13, 201836d ✓ HHS report on time5 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 5 weeks / 36 days

Jun 7, 2018

Begins

Jun 7, 2018

Discovered

Jul 13, 2018

Filed

vs. sector median

4 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed790 affectedView incident

Name: Charles Cole Memorial Hospital
norm: charles cole memorial hospital
Industry: Health Care Services

Name: Charles Cole Memorial Hospital
norm: charles cole memorial hospital
Industry: Healthcaresource default

Discovered: Jun 7, 2018
Breach occurred: Jun 7, 2018 – Jun 14, 2018
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 13, 2018
Affected individuals: 790nationwide
Data types: PHIHealth (basic)Identity (basic)
HHS breach type: Hacking / IT incident
Where the data lived: Email
Covered-entity type: Healthcare provider
Attack vector: Unauthorized Access
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Initial access: phishing_link

During the incident: Blocked the email sender
Blocked the hyperlink in the web appliance
Sent a communication to the recipients of the phishing attack notifying them of the phishing email
Required staff to reset passwords
Trained staff regarding phishing emails
Implemented administrative and technical safeguards for emails by restricting bulk email
Restricted the affected accounts from sending external emails
Deployed scripts to search and delete malicious emails from email exchange servers
Changes made: Implemented administrative and technical safeguards for emails by restricting bulk email
Restricted the affected accounts from sending external emails
Deployed scripts to search and delete malicious emails from email exchange servers
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(36 days from discovery to filing)
Compliance flags: HHS report on time · 36dHHS notified
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: Jun 7, 2018
→ Notified: Jul 13, 2018
36d 60 days HHS report on time
HIPAA
Discovered: Jun 7, 2018
→ Notified: Jul 13, 2018
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: Jun 7, 2018 → Notified: Jul 13, 2018	36d	60 days	HHS report on time
HIPAA	Discovered: Jun 7, 2018 → Notified: Jul 13, 2018	—	regulatory submission	HHS notified

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Jul 13, 2018
Raw hash: 8aa82ba43ca9124a1fb5f35ba3a23e3787db9fa2fe06b9476d30d35ca7635b29

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html2.1 KB

Download View at source

Reporting entityCharles Cole Memorial Hospital

Victim entityCharles Cole Memorial Hospital

Incidentdiscovered Jun 7, 2018

Stated responseBlocked the email sender

ComplianceHHS report on time

Extraction provenanceno artifact recorded

Source provenanceocrportal.hhs.gov

Source filing