MisuseHealthcareHealthcareTheftEmployee Data InvolvedCustomer Data InvolvedHealth (basic)Identity (basic)LowContained

Arizona Dermatology Group

bd_654e37a4cd150061 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 11, 2022

Filed

Oct 20, 2022

To disclose

10 weeks

Affected

62state residents only

Linked

3 filings

Confidence

65%

Arizona Dermatology Group, an affiliate of Forefront Dermatology, notified patients of a breach involving a former employee who stole and sold encrypted laptops and unencrypted iPads. Patient photos and basic PII may have been stored on the devices. Law enforcement was notified.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 10 weeks / 70 days

Aug 11, 2022

Discovered

Oct 20, 2022

Filed

vs. sector median

3 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecubabd_6495fb269a769b742022-11-04 · +15dCandidate

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_d61949bebbc06a9e2022-10-20Verified

Name: Forefront Dermatology, Sc
norm: forefront dermatology sc

Name: Arizona Dermatology Group
norm: arizona dermatology group
Industry: Healthcarellm

Discovered: Aug 11, 2022
Materiality determined: —
Notification sent: Sep 30, 2022
Affected individuals: 62state-resident count only
Data types: Health (basic)Identity (basic)
Attack vector: Insider
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: InternalFinancial
Regulator citations: notified law enforcement
Initial access: insider_action

During the incident: Launched an investigation
Notified law enforcement
Terminated the employee
Undertook an analysis to identify what information may have been stored on the iPads
Enhance our security protocols
Changes made: Enhance our security protocols to help prevent a similar incident from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(70 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

HHS OCROct 20 · first

Montana State AGOct 20 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-631.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 20, 2022
Raw hash: 1f34596e78593ca5f2ea8b35a9e9c79a715466796bec4c692d76f577a0de445e

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityForefront Dermatology, Sc

Victim entityArizona Dermatology Group

Incidentdiscovered Aug 11, 2022

Stated responseLaunched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov