MalwareHealthcareHealthcareRansomwareCapture Stored DataData EncryptedData ExfiltratedCustomer Data InvolvedPHIIdentity (basic)Government IDHealth (basic)MediumContained

Ascend Clinical, LLC

bd_43c5891ca65999ef · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 31, 2020

Filed

Oct 26, 2020

To disclose

21 weeks

Affected

Not disclosed

Linked

10 filings

Confidence

65%

Full breach record for Ascend Clinical, LLC →

Ascend Clinical LLC, a clinical reference laboratory specializing in kidney disease testing, experienced a ransomware incident. On May 31, 2020, Ascend detected encrypted data and unauthorized access. An attacker accessed and downloaded business records containing PHI, including names, addresses, medical diagnoses, and SSNs. Ascend engaged forensic consultants, restored systems, and offered one year of identity monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 40 days

discovery → filing · 21 weeks / 148 days

Apr 21, 2020

Begins

May 31, 2020

Discovered

Oct 26, 2020

Filed

vs. sector median

+9 wks slower

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

New Hampshire State AGbd_6f928c60b9b634a02020-10-26Verified
Washington State AGbd_80d721f819ea5e742020-10-27 · +1dVerified
Oregon State AGbd_affdc1609c7f455a2020-10-27 · +1dVerified
Massachusetts State AGbd_0c3f5760dbb44d4b2020-10-29 · +3dVerified by operator

Show 5 more filings ↓up to 68d gap

Maine State AGbd_6882f24b5e369f8a2020-10-23 · +3dVerified
HHS OCRbd_fc6b4a302719f9a02020-10-19 · +7dVerified by operator
South Carolina State AGbd_36cb93c68b6198c62020-11-03 · +8dVerified
Indiana State AGbd_9b91d1eadde4c40b2020-11-03 · +8dVerified
Montana State AGbd_31fe7e79e05ba1e32020-08-19 · +68dCandidate

Name: Ascend Clinical, LLC
norm: ascend clinical
Domain: labcheck5.com

Name: Ascend Clinical, LLC
norm: ascend clinical
Domain: labcheck5.com
Industry: Healthcarellm

Discovered: May 31, 2020
Breach occurred: Apr 21, 2020
Undetected for: 40 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PHIIdentity (basic)Government IDHealth (basic)
Data elements: Medical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified federal and local law enforcement authoritiesNotifying state and federal agencies responsible for enforcing privacy laws

During the incident: Notified federal and local law enforcement authorities
Retained a leading third party cybersecurity firm to investigate the nature and scope of the incident
Notifying state and federal agencies responsible for enforcing privacy laws
Worked with forensic consultants to restore and secure the impacted systems
Installation of forensic tools on all systems
Isolation of impacted systems until Ascend could confirm that they were secure
Implemented countermeasures and further upgraded its security systems
Secured the services of Kroll to provide identity monitoring at no cost for one year
Changes made: Implemented countermeasures and further upgraded its security systems to prevent future incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(148 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 9 states

View merged incident ↗

Montana State AGAug 19 · first

HHS OCR+61d

Maine State AG+65d

New Hampshire State AG+68d

California State AG+68d · this page

Washington State AG+69d

Oregon State AG+69d

Massachusetts State AG+71d

South Carolina State AG+76d

Indiana State AG+76d

Pattern: first filing Aug 19 (MT), last Nov 3 (IN) — a 76-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-195527
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 26, 2020
Raw hash: 0983d86966350525c66f81d08900ce2fad28dcbd640f90107f39c8c176fc481d

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityAscend Clinical, LLC

Victim entityAscend Clinical, LLC

Incidentdiscovered May 31, 2020

Stated responseNotified federal and local law enforcement authorities

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov