MalwareRansomwareCapture Stored DataData EncryptedData ExfiltratedCustomer Data InvolvedPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
Ascend Clinical, LLC
bd_43c5891ca65999ef · schema v1 · pii pii-v1
Full breach record for Ascend Clinical, LLC →Ascend Clinical LLC, a clinical reference laboratory specializing in kidney disease testing, experienced a ransomware incident. On May 31, 2020, Ascend detected encrypted data and unauthorized access. An attacker accessed and downloaded business records containing PHI, including names, addresses, medical diagnoses, and SSNs. Ascend engaged forensic consultants, restored systems, and offered one year of identity monitoring via Kroll.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_80d721f819ea5e74Washington State AGfiled 2020-10-27(1d gap)Verified
- bd_affdc1609c7f455aOregon State AGfiled 2020-10-27(1d gap)Verified
- bd_6882f24b5e369f8aMaine State AGfiled 2020-10-23(3d gap)Verified
- bd_fc6b4a302719f9a0HHS OCRfiled 2020-10-19(7d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-195527
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 26, 2020
- Raw hash
- 0983d86966350525c66f81d08900ce2fad28dcbd640f90107f39c8c176fc481d
Reporting entity
- Name
- Ascend Clinical, LLCnorm: ascend clinical
- Domain
- labcheck5.com
Victim entity
- Name
- Ascend Clinical, LLCnorm: ascend clinical
- Domain
- labcheck5.com
Incident
- Discovered
- May 31, 2020
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified federal and local law enforcement authoritiesNotifying state and federal agencies responsible for enforcing privacy laws
Compliance
- Time to disclose
- 21 weeks(148 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.