HackingHealthcareTechnologyHealthcareStolen CredentialsDelayed DiscoveryPIIIdentity (basic)LowContained

Sightpath Medical, LLC

bd_692fc05d939f0c74 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 9, 2022

Filed

Aug 14, 2023

To disclose

18 months

Affected

4state residents only

Linked

5 filings

Confidence

66%

Full breach record for Sightpath Medical, LLC →

Sightpath Medical, LLC notified Montana residents of a data breach discovered on Feb 9, 2022. Unauthorized access occurred, affecting employee personal information. Notification sent Aug 14, 2023, offering credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 18 months / 551 days

Feb 9, 2022

Discovered

Aug 14, 2023

Filed

vs. sector median

+68 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_0781331dfc7df24f2023-08-14Verified
New Hampshire State AGbd_20d83ae62147baf72023-08-14Verified
Maine State AGbd_2bd1773cb75c3b072023-08-14Verified
Indiana State AGbd_91787653f616c30d2023-08-14Verified

Name: Sightpath Medical, LLC
norm: sightpath medical

Name: Sightpath Medical, LLC
norm: sightpath medical
Industry: HealthcarellmTechnologyllm

Discovered: Feb 9, 2022
Materiality determined: —
Notification sent: Aug 14, 2023
Affected individuals: 4state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Took steps to secure our digital environment
Engaged a dedicated team of external cybersecurity experts to assist us in responding to and investigating the incident
Launched a comprehensive review of all potentially affected information
Offering complimentary access to Experian IdentityWorks
Changes made: Implemented additional measures to further enhance the security of our environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 months(551 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Massachusetts State AGAug 14 · first

New Hampshire State AGAug 14 · first

Maine State AGAug 14 · first

Indiana State AGAug 14 · first

Montana State AGAug 14 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-553.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 14, 2023
Raw hash: 60a916264e9a936d0e8d73e7f20ce08dba54000ce0bd65f32afd0ce914b599ea

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entitySightpath Medical, LLC

Victim entitySightpath Medical, LLC

Incidentdiscovered Feb 9, 2022

Stated responseTook steps to secure our digital environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov