MalwareHealthcareTechnologyHealthcareRansomwareRansom DemandedCustomer Data InvolvedPIIPHIIdentity (basic)Health (basic)LowContained

Parathon by JDA eHealth Systems

bd_56c3c0e11200ee04 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 27, 2023

Filed

Dec 22, 2023

To disclose

21 weeks

Affected

1state residents only

Linked

2 records

Confidence

66%

Full breach record for Parathon by JDA eHealth Systems →

Parathon by JDA eHealth Systems, a third-party denials management company for NorthShore University HealthSystem, disclosed a cybersecurity attack detected on July 27, 2023. An unauthorized third party attempted to infiltrate the network and demand ransom. Potential exposure includes names, addresses, DOBs, and PHI. No evidence of misuse found. Credit monitoring services offered.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d21 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 21 weeks / 148 days

Jul 27, 2023

Begins

Jul 27, 2023

Discovered

Dec 22, 2023

Filed

vs. sector median

+12 wks slower

This filing is one of 2 records about the same incident.View merged incident

A leak claim by akira about this victim was first seen 143 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteakirabd_cf7dec9a68f2c6a82023-08-01 · +143dCandidate

Name: Parathon by JDA eHealth Systems
norm: parathon by jda ehealth
Domain: jda.com

Name: Parathon by JDA eHealth Systems
norm: parathon by jda ehealth
Domain: jda.com
Industry: HealthcarellmTechnologyllm

Discovered: Jul 27, 2023
Breach occurred: Jul 27, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 22, 2023
Affected individuals: 1state-resident count only
Data types: PIIPHIIdentity (basic)Health (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Moved quickly to secure our network environment
Launched a thorough investigation
Performed investigation with the help of independent IT security and forensic investigators
Providing access to three different services offered services at no charge: Single Bureau Credit Monitoring, Single Bureau Credit Report, Single Bureau Credit Score
Services provided by Cyberscout through Identity Force, a TransUnion company
Reviewed and taken steps to enhance policies and procedures relating to the security of our systems and servers
Implemented additional safeguards and enhanced security measures
Changes made: Implemented additional safeguards and enhanced security measures to better protect the privacy and security of information in our systems
Reviewed and taken steps to enhance policies and procedures relating to the security of our systems and servers
Enhanced information life cycle management
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(148 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-975.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 22, 2023
Raw hash: f4781393d6d3db56d0acfdc9f7f6e813b6f8a73362fbc431060bfebe62f280f8

Linked disclosures

Ransomware claims (1)

Reporting entityParathon by JDA eHealth Systems

Victim entityParathon by JDA eHealth Systems

Incidentdiscovered Jul 27, 2023

Stated responseMoved quickly to secure our network environment

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov