CALIFORNIASocial EngineeringHealthcareHealthcarePhishingCustomer Data InvolvedData ExfiltratedPHIHealth (basic)Identity (basic)Government IDFinancial accountCriticalResolved

Good Samaritan Hospital Retirement Income Plan

bd_578004b36423aa6a · schema v1 · pii pii-v1

Severity

Critical

Financial impact

$600K

Discovered

Jun 1, 2019

Filed

Apr 17, 2020

To disclose

46 weeks

Affected

233,835

Linked

6 filings

Confidence

68%

Full breach record for Good Samaritan Hospital Retirement Income Plan →4 incidents on file

Good Samaritan Hospital, Inc. reported to HHS on 2020-04-17 a Hacking/IT Incident affecting 233,835 individuals. Breached information located on Email. A phishing attack compromised employee email accounts, exposing PHI including names, SSNs, and medical data. The entity settled with OCR for $600,000 and implemented a corrective action plan.

J jump to incidentP pin to compareR raw source

HIPAA clockDiscovered Jun 1, 2019 → Notified Apr 17, 2020321d ✗ HHS report late46 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 46 weeks / 321 days

Jun 1, 2019

Begins

Jun 1, 2019

Discovered

Apr 17, 2020

Filed

vs. sector median

+34 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_108a5c7d3a4a579a2020-05-29 · +42dVerified
California State AGbd_3cd1a1e64491ca3b2020-05-29 · +42dVerified
Indiana State AGbd_0ec429e30ae96ea72020-06-01 · +45dVerified
Montana State AGbd_ef28f42e166215312020-07-01 · +75dCandidate

Show 1 more filing ↓up to 103d gap

California State AGbd_09310420901426e02020-07-29 · +103dVerified

Name: Good Samaritan Hospital Retirement Income Plan
norm: good samaritan hospital retirement income plan
Industry: Health Care Services

Name: Good Samaritan Hospital Retirement Income Plan
norm: good samaritan hospital retirement income plan
Industry: Healthcaresource default

Discovered: Jun 1, 2019
Breach occurred: Jun 1, 2019
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 17, 2020
Affected individuals: 233,835nationwide
Data types: PHIHealth (basic)Identity (basic)Government IDFinancial account
HHS breach type: Hacking / IT incident
Where the data lived: Email
Covered-entity type: Healthcare provider
Attack vector: Unauthorized Access
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Regulator citations: Notified HHS OCRSettled with a resolution agreement and corrective action plan
Initial access: phishing_link

During the incident: Paid a $600,000 settlement to OCR
Agreed to implement a corrective action plan that will be monitored by OCR for two years
Changes made: Conducting an accurate and thorough risk analysis of the potential risks and vulnerabilities to the confidentiality, integrity, and availability of its ePHI
Developing and implementing a risk management plan to address and mitigate security risks and vulnerabilities identified in its risk analysis
Developing, maintaining, and revising, as necessary, its written policies and procedures to comply with the HIPAA Rules
Training its workforce members who have access to PHI on its HIPAA policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 46 weeks(321 days from discovery to filing)
Compliance flags: HHS report late · 321dHHS notified
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: Jun 1, 2019
→ Notified: Apr 17, 2020
321d 60 days HHS report late
HIPAA
Discovered: Jun 1, 2019
→ Notified: Apr 17, 2020
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: Jun 1, 2019 → Notified: Apr 17, 2020	321d	60 days	HHS report late
HIPAA	Discovered: Jun 1, 2019 → Notified: Apr 17, 2020	—	regulatory submission	HHS notified

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 4 states

View merged incident ↗

HHS OCRApr 17 · first · this page

Massachusetts State AG+42d

California State AG+42d

Indiana State AG+45d

Montana State AG+75d

California State AG+103d

Pattern: first filing Apr 17 (CA), last Jul 29 (CA) — a 103-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Apr 17, 2020
Raw hash: 97b155df1a4ad136be8cbfa21830284e8a53f942f69c510534261296d80fda06

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html3.1 KB

Download View at source

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityGood Samaritan Hospital Retirement Income Plan

Victim entityGood Samaritan Hospital Retirement Income Plan

Incidentdiscovered Jun 1, 2019

Stated responsePaid a $600,000 settlement to OCR

ComplianceHHS report late

Extraction provenanceno artifact recorded

Source provenanceocrportal.hhs.gov

Source filing