Social EngineeringHealthcareFinancial ServicesHealthcarePhishingBECSupply Chain (3P Vendor)Customer Data InvolvedRansom DemandedPIIFinancial accountLowContained

Sentara Health Plans

bd_607e4c1a6518a3d8 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 10, 2021

Filed

Jun 24, 2021

To disclose

6 weeks

Affected

3state residents only

Linked

2 filings

Confidence

65%

Full breach record for Sentara Health Plans →

Sentara Health Plans notified Montana residents of a third-party vendor breach involving unauthorized access to a billing employee's email account. The incident, occurring between Dec 2020 and Jan 2021, involved phishing leading to Business Email Compromise (BEC) targeting wire payments. Personal and financial data of plan participants may have been exposed. Sentara offered 2 years of free credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 138 days

discovery → filing · 6 weeks / 45 days

Dec 23, 2020

Begins

May 10, 2021

Discovered

Jun 24, 2021

Filed

vs. sector median

5 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_75b5813a65298a442021-06-24Verified

Name: Sentara Health Plans
norm: sentara health plans

Name: Sentara Health Plans
norm: sentara health plans
Industry: HealthcarellmFinancial Servicesllm

Discovered: May 10, 2021
Breach occurred: Dec 23, 2020 – Jan 27, 2021
Undetected for: 138 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 10, 2021
Affected individuals: 3state-resident count only
Data types: PIIFinancial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1114 Email CollectionT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Terminated the unauthorized access
Changed the employee’s credentials
Commenced an investigation supported by forensics experts
Reported this matter to law enforcement
Arranged for you to receive an offer of credit monitoring at no cost to you for a period of two years
Changes made: Working with the vendor to reinforce its existing security protocols and processes
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(45 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGJun 24 · first

Montana State AGJun 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/a-notif-74.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 24, 2021
Raw hash: 431edee802098b13e2c55185feb05a85e1f3eff103d48317dd85fc53cf8fcb1d

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entitySentara Health Plans

Victim entitySentara Health Plans

Incidentdiscovered May 10, 2021

Stated responseTerminated the unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov