HackingHealthcareHealthcareStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPIIIdentity (basic)Government IDFinancialHighContained

Lexington Medical Center

bd_5bc7675324317ae6 · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 13, 2017

Filed

Mar 14, 2017

To disclose

29 days

Affected

21,632state residents only

Linked

3 filings

Confidence

65%

Lexington Medical Center notified South Carolina employees of a cyberattack on Feb 13, 2017, where an unauthorized third party accessed the eConnect/PeopleSoft database. The breach exposed employee PII including names, birth dates, SSNs, and W-2 forms. The organization engaged cybersecurity firms, notified law enforcement, and provided two years of credit monitoring.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due29 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 29 days

Feb 13, 2017

Discovered

Mar 14, 2017

Filed

vs. sector median

5 wks faster

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_52eb689761854e1f2017-03-02 · +12dVerified
Montana State AGbd_5e95a65c7820cd1a2017-03-02 · +12dCandidate

Name: Lexington Medical Center
norm: lexington medical center

Name: Lexington Medical Center
norm: lexington medical center
Industry: Healthcarellm

Discovered: Feb 13, 2017
Materiality determined: —
Notification sent: Mar 2, 2017
Affected individuals: 21,632state-resident count only
Data types: PIIIdentity (basic)Government IDFinancial
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: contacted federal and state law enforcement officials
Initial access: valid_credentials

During the incident: Eliminated further unauthorized access
Began an investigation
Engaged several national cybersecurity firms to assist us
Contacted federal and state law enforcement officials
Established a dedicated and confidential call center staffed with identity theft professionals
Changes made: Offered free two-year membership for Experian’s ProtectMyID Alert
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGMar 2 · first

Montana State AGMar 2 · first

South Carolina State AG+12d · this page

Pattern: first filing Mar 2 (NH), last Mar 14 (SC) — a 12-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2017/LexingtonMedicalCenter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 14, 2017
Raw hash: 6265cdeffc6b5bd5bd79548d539854c6f0dfe898576a15fd983cfc80e6c8e950

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityLexington Medical Center

Victim entityLexington Medical Center

Incidentdiscovered Feb 13, 2017

Stated responseEliminated further unauthorized access

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov