MalwareProfessional ServicesHealthcareProfessional ServicesRansomwareData EncryptedRansom DemandedBusiness Associate (HIPAA)Customer Data InvolvedPIIPHIIdentity (basic)Government IDHealth (basic)MediumResolved

Wolverine Solutions Group

bd_4602af0c0261787c · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Dec 28, 2018

To disclose

—

Affected

Not disclosed

Linked

4 filings

Confidence

81%

Full breach record for Wolverine Solutions Group →2 incidents on file

On approximately September 23, 2018, Wolverine Solutions Group, a services provider for health-related business clients, experienced a ransomware attack that locked up its servers and workstations. The company performed services for Blue Cross Blue Shield of Michigan, and affected data included demographic information, health plan contract numbers, medical information, and Social Security numbers. A forensics investigation found no evidence of data extraction. Notification letters were sent December 28, 2018, with 24 months of AllClear ID identity protection offered.

J jump to incidentP pin to compareR raw source

Incident timeline

Sep 23, 2018

Begins

Dec 28, 2018

Filed

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_86ef4dd3f09bb3892018-12-28Verified
HHS OCRbd_f1d8b234d01525492018-12-28Verified
Montana State AGbd_ba0d269a5a8a147c2018-12-27 · +1dVerified

Name: Wolverine Solutions Group
norm: wolverine solutions

Name: Wolverine Solutions Group
norm: wolverine solutions
Industry: Professional ServicesllmHealthcarellm

Discovered: —
Breach occurred: Sep 23, 2018
Materiality determined: —
Notification sent: Dec 28, 2018
Affected individuals: Not disclosed
Data types: PIIPHIIdentity (basic)Government IDHealth (basic)
Data elements: Medical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Third party: via Blue Cross Blue Shield of Michigan

During the incident: Hired a forensics expert to investigate the issue
Notified client (Blue Cross Blue Shield of Michigan) on November 8, 2018
Arranged for affected individuals to have AllClear ID protect their identity for 12 months at no cost
Made special arrangements for Blue Cross Blue Shield of Michigan members to receive 24 months of identity protection through AllClear ID
Changes made: Migrated to a different computer system that has added protections
Training our workforce in safeguards
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGDec 27 · first

Massachusetts State AG+1d

HHS OCR+1d

California State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-143325
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 28, 2018
Raw hash: bb60a0b89b20882d26fecf0559b32deff66f4f8ccf881786208afa7edf7c5dc3

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityWolverine Solutions Group

Victim entityWolverine Solutions Group

IncidentRansomware

Stated responseHired a forensics expert to investigate the issue

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov