Social EngineeringHealthcareHealthcarePhishingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)CredentialsMediumContained

Doctors Community Medical Center

bd_5947d2997773cfa2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 1, 2020

Filed

May 6, 2020

To disclose

18 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

65%

Full breach record for Doctors Community Medical Center →3 incidents on file

Doctors Community Medical Center disclosed a phishing incident in January 2020 where employee credentials were compromised. Attackers accessed payroll and email accounts containing patient PHI (SSN, DOB, medical records) and employee data. Occurred Nov 2019-Jan 2020. DCMC engaged forensic investigators, secured accounts, notified law enforcement, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 56 days

discovery → filing · 18 weeks / 126 days

Nov 6, 2019

Begins

Jan 1, 2020

Discovered

May 6, 2020

Filed

vs. sector median

+5 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_cb2c2cbf91bb534d2020-05-07 · +1dVerified
New Hampshire State AGbd_9883e5551688b9902020-05-11 · +5dVerified

Name: Doctors Community Medical Center
norm: doctors community medical center

Name: Doctors Community Medical Center
norm: doctors community medical center
Industry: Healthcarellm

Discovered: Jan 1, 2020
Breach occurred: Nov 6, 2019 – Jan 30, 2020
Undetected for: 56 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 13, 2020
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)Credentials
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: notified state and federal regulatorsnotified federal law enforcement
Initial access: phishing_link

During the incident: Launched an investigation to determine the nature and scope of this event
Working with computer forensic investigators to determine the exact information impacted and identities of the individuals contained in the email accounts
Took steps to secure our email accounts
Notified state and federal regulators, as well as federal law enforcement
Offering you access to 12 months of complimentary of credit monitoring and identity restoration services through Experian
Changes made: Reviewing our existing policies and procedures and implementing additional safeguards to further secure the information in our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(126 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGMay 6 · first · this page

Massachusetts State AG+1d

New Hampshire State AG+5d

Pattern: first filing May 6 (MT), last May 11 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/General-Notice-85.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 6, 2020
Raw hash: 11dc0cb5e6e9ac6479956d5c79714384d99f3fd9020513f9ab20033ab659b826

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityDoctors Community Medical Center

Victim entityDoctors Community Medical Center

Incidentdiscovered Jan 1, 2020

Stated responseLaunched an investigation to determine the nature and scope of this event

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov