Social EngineeringHealthcareTechnologyHealthcarePhishingCustomer Data InvolvedPIIIdentity (basic)LowContained

Ciox Health

bd_58f4d9794a938f1a · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 24, 2021

Filed

Dec 30, 2021

To disclose

27 weeks

Affected

5state residents only

Linked

12 filings

Confidence

66%

Full breach record for Ciox Health →5 incidents on file

Ciox Health LLC notified Montana residents of a security incident where an unauthorized person accessed an employee's email account between June 24 and July 2, 2021. The access was likely a result of phishing emails sent by the attacker for unrelated purposes. The incident involved limited patient information, specifically names and provider names. Ciox strengthened email security and provided enhanced cybersecurity training.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 27 weeks / 189 days

Jun 24, 2021

Begins

Jun 24, 2021

Discovered

Dec 30, 2021

Filed

vs. sector median

+15 wks slower

This filing is one of 12 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Illinois State AGbd_14a6665e4e66fd3e2022-01-01 · +2dVerified
Illinois State AGbd_1ec3992dd4a15fb32022-01-01 · +2dVerified
Illinois State AGbd_3e010de1e738a73c2022-01-01 · +2dVerified
Illinois State AGbd_97ad92133a769f0a2022-01-01 · +2dCandidate

Show 6 more filings ↓up to 2d gap

Illinois State AGbd_af0e954752ce8cac2022-01-01 · +2dCandidate
Illinois State AGbd_c56f52f2b5f7409b2022-01-01 · +2dCandidate
Illinois State AGbd_d740ffe60aaec6bb2022-01-01 · +2dCandidate
Illinois State AGbd_fbb8b79f2073c9652022-01-01 · +2dCandidate
Illinois State AGbd_ff159ed3f43f11092022-01-01 · +2dCandidate
Illinois State AGbd_ffee19006810ff702022-01-01 · +2dVerified

Showing first 10 of 11 linked disclosures.

Name: Ciox Health
norm: ciox health

Name: Ciox Health
norm: ciox health
Industry: HealthcarellmTechnologyllm

Discovered: Jun 24, 2021
Breach occurred: Jun 24, 2021 – Jul 2, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 5state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalSecondary
Initial access: phishing_link

During the incident: Reviewed the account’s contents to determine whether sensitive information was contained in the account
Implementing additional procedures to further strengthen our email security
Providing enhanced cybersecurity training to our employees
Changes made: Implementing additional procedures to further strengthen our email security
Providing enhanced cybersecurity training to our employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(189 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 2 states

View merged incident ↗

Montana State AGDec 30 · first · this page

Illinois State AG+2d

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-25.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 30, 2021
Raw hash: d7b58d4603b577f12c19af78598f714d66469ca7e798b7dc3d05943cced8dac9

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityCiox Health

Victim entityCiox Health

Incidentdiscovered Jun 24, 2021

Stated responseReviewed the account’s contents to determine whether sensitive information was contained in the account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov