HackingHealthcareHealthcareCustomer Data InvolvedPIIIdentity (basic)Government IDMediumContained

Altoona Logan Township Mobile Medical Emergency Department Authority

bd_37a4e2345a3f2d22 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 11, 2024

Filed

Jun 21, 2024

To disclose

15 weeks

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for Altoona Logan Township Mobile Medical Emergency Department Authority →

Altoona Logan Township Mobile Medical Emergency Department Authority (AMED) reported unauthorized network access detected on March 11, 2024. Investigation revealed personal information, including government IDs, may have been accessed between March 8-12, 2024. AMED engaged external cybersecurity professionals and is offering credit monitoring services. No evidence of identity theft was found.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

discovery → filing · 15 weeks / 102 days

Mar 8, 2024

Begins

Mar 11, 2024

Discovered

Jun 21, 2024

Filed

vs. sector median

+4 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

HHS OCRbd_5ba2ff591ba809002024-06-21Verified
Maine State AGbd_68c2c85ecb7502862024-06-21Candidate

Name: Altoona Logan Township Mobile Medical Emergency Department Authority
norm: altoona logan township mobile medical emergency department authority

Name: Altoona Logan Township Mobile Medical Emergency Department Authority
norm: altoona logan township mobile medical emergency department authority
Industry: Healthcarellm

Discovered: Mar 11, 2024
Breach occurred: Mar 8, 2024 – Mar 12, 2024
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals
Offering a complimentary month membership of Identity Defense Complete credit and identity monitoring
Set up a dedicated and confidential toll-free response line
Changes made: Continually evaluates and modifies its practices and internal controls to enhance the security and privacy of your information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(102 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

HHS OCRJun 21 · first

Maine State AGJun 21 · first

Montana State AGJun 21 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1499.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 21, 2024
Raw hash: 7c3e6c900d03ab166b7321db32e2cf6eb87b9d71d7b6b9363d0bc72dc44749af

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityAltoona Logan Township Mobile Medical Emergency Department Authority

Victim entityAltoona Logan Township Mobile Medical Emergency Department Authority

Incidentdiscovered Mar 11, 2024

Stated responseCommenced a prompt and thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov