MalwareHealthcareHealthcareRansomwareData EncryptedRansom DemandedPHIHealth (basic)Identity (basic)Government IDMediumContained

CompleteCare Health Network

bd_37e253e576c4ecfd · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 12, 2023

Filed

Dec 15, 2023

To disclose

9 weeks

Affected

7state residents only

Linked

4 filings

Confidence

66%

Full breach record for CompleteCare Health Network →2 incidents on file

CompleteCare Health Network notified Montana residents of a ransomware attack detected on October 12, 2023. The incident exposed PHI, SSNs, names, and addresses. The company engaged forensic specialists, notified law enforcement, and offered 12 months of credit monitoring. No evidence of misuse was found at the time of notification.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 64 days

Oct 12, 2023

Begins

Oct 12, 2023

Discovered

Dec 15, 2023

Filed

vs. sector median

3 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Vermont State AGbd_640ab34377371ade2023-12-15Candidate
Delaware State AGbd_d0bcce42620f85242023-12-15Verified
HHS OCRbd_ec69125a8d6b6c8f2023-12-20 · +5dCandidate

Name: CompleteCare Health Network
norm: completecare health network
Domain: completecarenj.org

Name: CompleteCare Health Network
norm: completecare health network
Domain: completecarenj.org
Industry: Healthcarellm

Discovered: Oct 12, 2023
Breach occurred: Oct 12, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 7, 2023
Affected individuals: 7state-resident count only
Data types: PHIHealth (basic)Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcement
Initial access: valid_credentials

During the incident: Disconnected the affected systems
Initiated response protocols
Engaged third-party forensic specialists to assist with securing the network environment and investigating the extent of any unauthorized activity
Notified federal law enforcement
Changes made: Revising policies and procedures
Revising network security software
Revising how we store and manage data
Network environment under 24/7 monitoring by cybersecurity experts
Engaged leading cybersecurity firms to assist with monitoring our network for the long term
Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge for twelve (12) months
Providing proactive fraud assistance through Cyberscout through Identity Force
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(64 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Vermont State AGDec 15 · first

Delaware State AGDec 15 · first

Montana State AGDec 15 · first · this page

HHS OCR+5d

Pattern: first filing Dec 15 (VT), last Dec 20 (NJ) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1177.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 15, 2023
Raw hash: 5a115f66889d69b743028d3b401745723ee4bddef585ecf09a6efa5b6a3bfd75

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityCompleteCare Health Network

Victim entityCompleteCare Health Network

Incidentdiscovered Oct 12, 2023

Stated responseDisconnected the affected systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov