HackingHealthcareTechnologyHealthcareVulnerability ExploitTargetedPIIIdentity (basic)Health (basic)PHIMediumContained

Ravkoo

bd_4b4f4f311c81eaee · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 27, 2021

Filed

Jan 3, 2022

To disclose

14 weeks

Affected

5,729state residents only

Linked

11 filings

Confidence

70%

Full breach record for Ravkoo →

Ravkoo, a digital SaaS platform for prescription fulfillment, notified Washington residents of a cybersecurity attack on its AWS portal detected on September 27, 2021. The incident may have exposed names, addresses, phone numbers, and prescription/limited medical information for 5,729 Washingtonians. No SSNs were accessed. Ravkoo offered one year of identity monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d14 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 14 weeks / 98 days

Sep 27, 2021

Begins

Sep 27, 2021

Discovered

Jan 3, 2022

Filed

vs. sector median

+3 wks slower

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Massachusetts State AGbd_2ce90ff564900d0d2022-01-03Verified
HHS OCRbd_3dd01437251dd7992022-01-03Verified
California State AGbd_d601b80a961402702022-01-03Verified
New Hampshire State AGbd_d90f0cc5f913c2be2022-01-03Verified

Show 6 more filings ↓up to 2d gap

Montana State AGbd_e92fcd9fc02d394a2022-01-03Verified
Indiana State AGbd_fc5c1d10a6aef0942022-01-03Verified
South Carolina State AGbd_b1c21d4401605dcb2022-01-04 · +1dVerified
Oregon State AGbd_e271be692c34e9322022-01-05 · +2dVerified
Maine State AGbd_e4f82f363cdb12182022-01-05 · +2dVerified
Illinois State AGbd_a6db1f6b29469b452022-01-01 · +2dCandidate

Name: Ravkoo
norm: ravkoo

Name: Ravkoo
norm: ravkoo
Industry: HealthcarellmTechnologyllm

Discovered: Sep 27, 2021
Breach occurred: Sep 27, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 5,729state-resident count only
Data types: PIIIdentity (basic)Health (basic)PHI
Data elements: NameDate of birthMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found while ongoingContained same day
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Arranged for you to receive a complementary, online identity monitoring service for one year provided by Kroll Information Assurance, LLC
Changes made: Actively assessing ways we can further improve our cybersecurity posture
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(98 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 11 states

View merged incident ↗

Illinois State AGJan 1 · first

Massachusetts State AG+2d

HHS OCR+2d

California State AG+2d

New Hampshire State AG+2d

Montana State AG+2d

Indiana State AG+2d

Washington State AG+2d · this page

South Carolina State AG+3d

Oregon State AG+4d

Maine State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA5242.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 3, 2022
Raw hash: 81504441a635f42ed522ce5cc5ad101703332451b5b822e763798ab061485beb

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityRavkoo

Victim entityRavkoo

Incidentdiscovered Sep 27, 2021

Stated responseArranged for you to receive a complementary, online identity monitoring service for one year provided by Kroll Information Assurance, LLC

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com