MalwareRansomwareData EncryptedCustomer Data InvolvedEmployee Data InvolvedPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTEMPLOYMENTCREDENTIALSMediumContained
Professional Business Systems, Inc.
bd_6ae8ca48588440d5 · schema v1 · pii pii-v1
Full breach record for Professional Business Systems, Inc. →Professional Business Systems (d/b/a Practicefirst Medical Management Solutions and PBS Medcode Corp.) experienced a ransomware attack on December 25, 2020. An unauthorized actor attempted to encrypt systems and copied files containing limited patient and employee personal information, including PHI, SSNs, and financial data. The company shut down systems, engaged forensic experts, and notified law enforcement. The actor claimed the data was destroyed. Two years of identity monitoring were offered to affected individuals.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_0106ed492c5ece37Maine State AGfiled 2021-07-01Candidate
- bd_635dc79d7d64eeb6HHS OCRfiled 2021-07-01Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-542502
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 1, 2021
- Raw hash
- 8ed1293fa9072a68c77afcda813b84292db8ef552d4bda32d3b9a5225ec0bdbb
Reporting entity
- Name
- Professional Business Systems, Inc.norm: professional business
Victim entity
- Name
- Professional Business Systems, Inc.norm: professional business
Incident
- Discovered
- Dec 25, 2020
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTEMPLOYMENTCREDENTIALS
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- External
- Regulator citations
- Reported the Incident to appropriate law enforcement authorities
Compliance
- Time to disclose
- 27 weeks(188 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.