HackingHealthcareHealthcareDelayed DiscoveryMulti-Stage ChainPIIIdentity (basic)Health (basic)LowActive

Hoboken Radiology LLC

bd_3d36ae387035bda8 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 3, 2020

Filed

Sep 7, 2021

To disclose

44 weeks

Affected

2state residents only

Confidence

65%

Full breach record for Hoboken Radiology LLC →3 incidents on file

Hoboken Radiology, LLC notified patients of unauthorized access to a medical imaging server between June 2, 2019, and December 1, 2020. The incident was discovered on November 3, 2020. Patient PII and PHI were at risk, but no SSNs or financial data were involved. Investigation is ongoing.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 520 days

discovery → filing · 44 weeks / 308 days

Jun 2, 2019

Begins

Nov 3, 2020

Discovered

Sep 7, 2021

Filed

vs. sector median

+32 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: Hoboken Radiology LLC
norm: hoboken radiology

Name: Hoboken Radiology LLC
norm: hoboken radiology
Industry: Healthcarellm

Discovered: Nov 3, 2020
Breach occurred: Jun 2, 2019 – Dec 1, 2020
Undetected for: 520 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 3, 2021
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)Health (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: External
Regulator citations: reporting this incident to relevant state and federal regulators
Initial access: exploit_public_facing

During the incident: Launched an investigation
Took steps to secure our systems
Worked diligently to investigate and respond to this incident
Identifying and notifying potentially impacted individuals
Reporting this incident to relevant state and federal regulators
Changes made: Reviewing our policies, procedures, and processes related to storage of and access to personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 44 weeks(308 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-5.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 7, 2021
Raw hash: dbcd16ab68f7ef4ee6c54e6d7cb041f592bb40910c211c44343455373aa1ec70

Reporting entityHoboken Radiology LLC

Victim entityHoboken Radiology LLC

Incidentdiscovered Nov 3, 2020

Stated responseLaunched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov