MalwareHealthcareHealthcareRansomwareData ExfiltratedRansom DemandedTargetedIdentity (basic)Government IDPHIPIIHealth (basic)HighContained

Hi-School Pharmacy

bd_5fcd199d53571b28 · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 3, 2023

Filed

Dec 6, 2023

To disclose

5 weeks

Affected

3,695state residents only

Linked

7 filings

Confidence

69%

Full breach record for Hi-School Pharmacy →

Hi-School Pharmacy (WA) reported a ransomware cyberattack occurring Nov 2-3, 2023. The incident disrupted computer networks and resulted in unauthorized acquisition of personal information (PII). 3,695 Washington residents were affected. The company engaged forensic experts, notified the FBI, and offered 12 months of credit monitoring via CyberScout.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 5 weeks / 33 days

Nov 2, 2023

Begins

Nov 3, 2023

Discovered

Dec 6, 2023

Filed

vs. sector median

8 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit_3bd_6726901987c872902023-11-28 · +8dVerified by operator

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_5581dbf8513ed2152023-12-06Verified by operator
Oregon State AGbd_cf8c1fc5deb781a02023-12-06Verified
Montana State AGbd_419a2f3dbc67d2a52023-12-05 · +1dVerified
HHS OCRbd_54ad2220f467c6e72023-12-05 · +1dVerified

Show 1 more filing ↓up to 1d gap

Maine State AGbd_921beb7cfd1439e92023-12-05 · +1dVerified

Name: Hi-School Pharmacy
norm: hi school pharmacy
Domain: hi-schoolpharmacy.com

Name: Hi-School Pharmacy
norm: hi school pharmacy
Domain: hi-schoolpharmacy.com
Industry: Healthcarellm

Discovered: Nov 3, 2023
Breach occurred: Nov 2, 2023 – Nov 3, 2023
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Dec 5, 2023
Affected individuals: 3,695state-resident count only
Data types: PIIIdentity (basic)
Data elements: NameSocial Security numberDate of birthHealth insurance IDMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found after the fact
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified the FBI

During the incident: Engaged digital forensic experts to assist with the process
Engaged a consumer remediation firm
Notified the FBI
Implemented measures to enhance network security
Changes made: Implemented measures to enhance network security and minimize the risk of a similar incident occurring in the future
Offering complimentary credit monitoring and identity protection services through CyberScout
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(33 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Montana State AGDec 5 · first

HHS OCRDec 5 · first

Maine State AGDec 5 · first

Massachusetts State AG+1d

Oregon State AG+1d

Washington State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA27188.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 6, 2023
Raw hash: 2c582f2df6f2fd4e3dc2fc839e5af900c193964ad0256396dd78dfae512e0f4c

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityHi-School Pharmacy

Victim entityHi-School Pharmacy

Incidentdiscovered Nov 3, 2023

Stated responseEngaged digital forensic experts to assist with the process

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com