HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedDelayed DiscoveryGovernment IDIdentity (basic)HighContained

Ascend Clinical, LLC

bd_6882f24b5e369f8a · schema v1 · pii pii-v1

Severity

High

Discovered

May 31, 2020

Filed

Oct 23, 2020

To disclose

21 weeks

Affected · nationwide

77,44317 in this filing

Linked

10 filings

Confidence

66%

Full breach record for Ascend Clinical, LLC →

Ascend Clinical LLC, a healthcare entity based in Redwood City, CA, reported an external system breach (hacking) occurring on or about April 21, 2020. The incident compromised the names and Social Security Numbers of 77,443 individuals, including 17 Maine residents. Discovery occurred on May 31, 2020, with supplemental discovery on September 23, 2020. Ascend Clinical notified affected individuals in writing on October 26, 2020, and provided one year of identity and credit monitoring services through Kroll.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered May 31, 2020 → Filed with AG Oct 23, 2020145d ✗ ME AG >90d21 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 40 days

discovery → filing · 21 weeks / 145 days

Apr 21, 2020

Begins

May 31, 2020

Discovered

Oct 23, 2020

Filed

vs. sector median

+9 wks slower

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

California State AGbd_43c5891ca65999ef2020-10-26 · +3dVerified
New Hampshire State AGbd_6f928c60b9b634a02020-10-26 · +3dVerified
Washington State AGbd_80d721f819ea5e742020-10-27 · +4dVerified
Oregon State AGbd_affdc1609c7f455a2020-10-27 · +4dVerified

Show 5 more filings ↓up to 65d gap

HHS OCRbd_fc6b4a302719f9a02020-10-19 · +4dVerified by operator
Massachusetts State AGbd_0c3f5760dbb44d4b2020-10-29 · +6dVerified by operator
South Carolina State AGbd_36cb93c68b6198c62020-11-03 · +11dVerified
Indiana State AGbd_9b91d1eadde4c40b2020-11-03 · +11dVerified
Montana State AGbd_31fe7e79e05ba1e32020-08-19 · +65dCandidate

Name: Ascend Clinical, LLC
norm: ascend clinical
Domain: labcheck5.com

Name: Ascend Clinical, LLC
norm: ascend clinical
Domain: labcheck5.com
Industry: Healthcarellm

Discovered: May 31, 2020
Breach occurred: Apr 21, 2020
Undetected for: 40 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 26, 2020
Affected individuals: 77,443state + nationwide
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: Filed data breach notice with Maine Attorney General
Initial access: exploit_public_facing

During the incident: Sent written notification to affected individuals on 10/26/2020
Offered 1 year of identity and credit monitoring through Kroll
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(145 days from discovery to filing)
Compliance flags: ME AG >90d · 145dME resident >60d · 148d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: May 31, 2020
→ Filed with AG: Oct 23, 2020
145d 90 days ME AG >90d
Maine
Discovered: May 31, 2020
→ Notified: Oct 26, 2020
148d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: May 31, 2020 → Filed with AG: Oct 23, 2020	145d	90 days	ME AG >90d
Maine	Discovered: May 31, 2020 → Notified: Oct 26, 2020	148d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 9 states

View merged incident ↗

Montana State AGAug 19 · first

HHS OCR+61d

Maine State AG+65d · this page

California State AG+68d

New Hampshire State AG+68d

Washington State AG+69d

Oregon State AG+69d

Massachusetts State AG+71d

South Carolina State AG+76d

Indiana State AG+76d

Pattern: first filing Aug 19 (MT), last Nov 3 (IN) — a 76-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0583f1a4-984d-4a4f-85b5-04fedb713498.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 23, 2020
Raw hash: ec75d6bc5cde75c5e03dc204c4ad4fe092082aec73f940d8ee81293cb9dcb1b0

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityAscend Clinical, LLC

Victim entityAscend Clinical, LLC

Incidentdiscovered May 31, 2020

Stated responseSent written notification to affected individuals on 10/26/2020

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov