Social EngineeringHealthcareCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)MediumContained

RS Medical

bd_51b00751b6601cd3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 12, 2019

Filed

Jun 1, 2019

To disclose

—

Affected

Not disclosed

Linked

4 filings

Confidence

66%

Full breach record for RS Medical →

RS Medical notified customers in Delaware of a February 2019 incident where an employee's email account was accessed by external actors who sent 10,000 phishing emails. The breach potentially exposed names, addresses, DOBs, SSNs, and diagnosis codes. RS Medical notified HHS and the Delaware AG, implemented security upgrades, and educated staff.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 16 weeks / 109 days

Feb 11, 2019

Begins

Feb 12, 2019

Discovered

Jun 1, 2019

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Oregon State AGbd_162e5d83eb805c142019-04-11 · +51dVerified
Massachusetts State AGbd_9d007b1f8d31686c2019-04-11 · +51dVerified
HHS OCRbd_fc0ba3bb782085802019-04-01 · +61dVerified

Name: RS Medical
norm: rs medical
Domain: rsmedical.com

Name: RS Medical
norm: rs medical
Domain: rsmedical.com

Discovered: Feb 12, 2019
Breach occurred: Feb 11, 2019 – Feb 12, 2019
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the US Department of Health and Human ServicesNotified state’s Attorney General
Initial access: phishing_link

During the incident: Initiated a security investigation
Implemented network security upgrades to prevent this type of breach in the future
Educated our workforce on latest forms of phishing
Notified the US Department of Health and Human Services of this incident
Notified your state’s Attorney General of this incident
Changes made: Implemented network security upgrades
Educated workforce on phishing
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

HHS OCRApr 1 · first

Oregon State AG+10d

Massachusetts State AG+10d

Delaware State AG+61d · this page

Pattern: first filing Apr 1 (WA), last Jun 1 (DE) — a 61-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2019/06/RS-Medical-Customer-Breach-Notification-Letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 1, 2019
Raw hash: 98c2565ad7a96cb28cbbcb40ba4debca86c8f36b964dd1431706780a2028f23a

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityRS Medical

Victim entityRS Medical

Incidentdiscovered Feb 12, 2019

Stated responseInitiated a security investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceattorneygeneral.delaware.gov