HackingHealthcareProfessional ServicesHealthcareTargetedPIIIdentity (basic)LowContained

Comprehensive Health Services

bd_6056bb70a1aa60c0 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 3, 2021

Filed

Feb 15, 2022

To disclose

15 weeks

Affected

335state residents only

Linked

9 filings

Confidence

66%

Full breach record for Comprehensive Health Services →7 incidents on file

Comprehensive Health Services (CHS) notified Montana residents of a cyber intrusion detected on November 3, 2021. The incident involved unauthorized access to pre-2019 invoicing files containing personal information of current and former employees of CHS clients. CHS engaged forensic experts, reported the incident to the FBI, and implemented enhanced network security measures including new EDR tools. No evidence of misuse was found.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 15 weeks / 104 days

Nov 3, 2021

Discovered

Feb 15, 2022

Filed

vs. sector median

+2 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

New Hampshire State AGbd_119a2929b9bc9c2b2022-02-15Verified by operator
Washington State AGbd_16446861756e5cbd2022-02-15Candidate
HHS OCRbd_31814f7356b9be6a2022-02-15Candidate
Maine State AGbd_5dff8e848d075aab2022-02-15Verified

Show 4 more filings ↓up to 29d gap

Oregon State AGbd_fb0f599dc707faf32022-02-15Candidate
New Hampshire State AGbd_71314889a3bf0e512022-01-20 · +26dVerified by operator
New Hampshire State AGbd_3287d556e934a6bd2022-03-15 · +28dVerified by operator
Maine State AGbd_7b6e34bd70633bad2022-03-16 · +29dVerified by operator

Name: Comprehensive Health Services
norm: comprehensive health

Name: Comprehensive Health Services
norm: comprehensive health
Industry: HealthcarellmProfessional Servicesllm

Discovered: Nov 3, 2021
Materiality determined: —
Notification sent: —
Affected individuals: 335state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Reported the incident to law enforcement, including the Federal Bureau of Investigation (“FBI”)

During the incident: Engaged cybersecurity experts to assist in our response to the incident
Reported the incident to law enforcement, including the Federal Bureau of Investigation (“FBI”)
Implemented additional corrective actions as recommended by the forensic review team
Purchased a new suite of endpoint detection and response tools, and installing this software on all servers and endpoints on the network enterprise
Replaced our previous threat detection and monitoring surveillance vendor
Added capabilities for extended detection and response to future attempted network intrusions
Conducted network penetration testing
Offering complimentary identity protection services through Equifax
Changes made: Purchased a new suite of endpoint detection and response tools, and installing this software on all servers and endpoints on the network enterprise
Replaced our previous threat detection and monitoring surveillance vendor
Added capabilities for extended detection and response to future attempted network intrusions
Conducted network penetration testing
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(104 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 6 states

View merged incident ↗

New Hampshire State AGJan 20 · first

New Hampshire State AG+26d

Washington State AG+26d

HHS OCR+26d

Maine State AG+26d

Oregon State AG+26d

Montana State AG+26d · this page

New Hampshire State AG+54d

Maine State AG+55d

Pattern: first filing Jan 20 (NH), last Mar 16 (ME) — a 55-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Comprehensive-Health-Services-Consumer-Notification-Letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 15, 2022
Raw hash: d4b6e4efad83337605cb74dc4014712da797a25ca56b046a43009f54e6cbad73

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityComprehensive Health Services

Victim entityComprehensive Health Services

Incidentdiscovered Nov 3, 2021

Stated responseEngaged cybersecurity experts to assist in our response to the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov