MalwareHealthcareTechnologyHealthcareRansomwareRansom DemandedCustomer Data InvolvedPIIPHIIdentity (basic)Health (basic)LowContained

Parathon by JDA eHealth Systems

bd_56c3c0e11200ee04 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 27, 2023

Filed

Dec 22, 2023

To disclose

21 weeks

Affected

1state residents only

Confidence

66%

Full breach record for Parathon by JDA eHealth Systems →2 incidents on file

Parathon by JDA eHealth Systems, a third-party denials management company for NorthShore University HealthSystem, disclosed a cybersecurity attack detected on July 27, 2023. An unauthorized third party attempted to infiltrate the network and demand ransom. Potential exposure includes names, addresses, DOBs, and PHI. No evidence of misuse found. Credit monitoring services offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 21 weeks / 148 days

Jul 27, 2023

Begins

Jul 27, 2023

Discovered

Dec 22, 2023

Filed

vs. sector median

+9 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Parathon by JDA eHealth Systems
norm: parathon by jda ehealth
Domain: jda.com

Name: Parathon by JDA eHealth Systems
norm: parathon by jda ehealth
Domain: jda.com
Industry: HealthcarellmTechnologyllm

Discovered: Jul 27, 2023
Breach occurred: Jul 27, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 22, 2023
Affected individuals: 1state-resident count only
Data types: PIIPHIIdentity (basic)Health (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Moved quickly to secure our network environment
Launched a thorough investigation
Performed investigation with the help of independent IT security and forensic investigators
Providing access to three different services offered services at no charge: Single Bureau Credit Monitoring, Single Bureau Credit Report, Single Bureau Credit Score
Services provided by Cyberscout through Identity Force, a TransUnion company
Reviewed and taken steps to enhance policies and procedures relating to the security of our systems and servers
Implemented additional safeguards and enhanced security measures
Changes made: Implemented additional safeguards and enhanced security measures to better protect the privacy and security of information in our systems
Reviewed and taken steps to enhance policies and procedures relating to the security of our systems and servers
Enhanced information life cycle management
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(148 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-975.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 22, 2023
Raw hash: f4781393d6d3db56d0acfdc9f7f6e813b6f8a73362fbc431060bfebe62f280f8

Reporting entityParathon by JDA eHealth Systems

Victim entityParathon by JDA eHealth Systems

Incidentdiscovered Jul 27, 2023

Stated responseMoved quickly to secure our network environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov