MalwareHealthcareHealthcareRansomwareData EncryptedTargetedIdentity (basic)Health (basic)PIILowActive

National Capital Poison Center

bd_402b447df6febfd1 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 1, 2017

Filed

Dec 8, 2017

To disclose

10 weeks

Affected

11state residents only

Linked

3 filings

Confidence

65%

Full breach record for National Capital Poison Center →

National Capital Poison Center (NCPC) disclosed a ransomware infection discovered in October 2017. Unauthorized access to a database server occurred on October 21, 2017. The database contained call-center records including names, DOBs, addresses, phone numbers, and medical record numbers from Jan 1997 to Oct 2017. Total impacted individuals unknown. Notice provided via website, media, and mail in Dec 2017.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 21, 2017

Begins

Dec 8, 2017

Filed

vs. sector median

3 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Oregon State AGbd_21f4358ded85492e2017-12-08Candidate
California State AGbd_82528aea2f34c6432017-12-08Verified

Name: National Capital Poison Center
norm: national capital poison center
Domain: poison.org

Name: National Capital Poison Center
norm: national capital poison center
Domain: poison.org
Industry: Healthcarellm

Discovered: Oct 1, 2017
Breach occurred: Oct 21, 2017
Materiality determined: —
Notification sent: Dec 8, 2017
Affected individuals: 11state-resident count only
Data types: Identity (basic)Health (basic)PII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Provided notice to certain state and foreign regulators

During the incident: Launched an investigation with the assistance of a third-party forensic investigator
Ensured the security of its information systems
Actively monitoring its information systems for suspicious activity
Posted notice of this incident on its website
Issued notice of this incident to, or published notice of this incident in, media serving certain states
Provided written notice of this incident to you, to certain state and foreign regulators, and to the consumer reporting agencies
Established a dedicated assistance line for individuals seeking additional information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(68 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Oregon State AGDec 8 · first

California State AGDec 8 · first

Montana State AGDec 8 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/National-Capital-Poison-Center-1.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 8, 2017
Raw hash: ab46538133d8ff4b3dbb1f45299d8e5e9b24d8ee100eb97422b02c0dd860c1f2

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityNational Capital Poison Center

Victim entityNational Capital Poison Center

Incidentdiscovered Oct 1, 2017

Stated responseLaunched an investigation with the assistance of a third-party forensic investigator

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov