MalwareHealthcareHealthcarePhishingRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)PHIMediumContained

Ascend Clinical, LLC

bd_6f928c60b9b634a0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 31, 2020

Filed

Oct 26, 2020

To disclose

21 weeks

Affected

20state residents only

Linked

10 filings

Confidence

67%

Full breach record for Ascend Clinical, LLC →

Ascend Clinical LLC reported a security incident detected on May 31, 2020, involving a phishing scheme that led to ransomware encryption and unauthorized access to patient data. The breach affected 20 New Hampshire residents, exposing PII and PHI including names, addresses, SSNs, and medical diagnoses. Notifications were sent by October 26, 2020.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 21 weeks / 148 days

May 31, 2020

Discovered

Oct 26, 2020

Filed

vs. sector median

+9 wks slower

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

California State AGbd_43c5891ca65999ef2020-10-26Verified
Washington State AGbd_80d721f819ea5e742020-10-27 · +1dVerified
Oregon State AGbd_affdc1609c7f455a2020-10-27 · +1dVerified
Massachusetts State AGbd_0c3f5760dbb44d4b2020-10-29 · +3dVerified by operator

Show 5 more filings ↓up to 68d gap

Maine State AGbd_6882f24b5e369f8a2020-10-23 · +3dVerified
HHS OCRbd_fc6b4a302719f9a02020-10-19 · +7dVerified by operator
South Carolina State AGbd_36cb93c68b6198c62020-11-03 · +8dVerified
Indiana State AGbd_9b91d1eadde4c40b2020-11-03 · +8dVerified
Montana State AGbd_31fe7e79e05ba1e32020-08-19 · +68dCandidate

Name: Ascend Clinical, LLC
norm: ascend clinical
Domain: labcheck5.com

Name: Ascend Clinical, LLC
norm: ascend clinical
Domain: labcheck5.com
Industry: Healthcarellm

Discovered: May 31, 2020
Materiality determined: —
Notification sent: Oct 26, 2020
Affected individuals: 20state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Data elements: Medical information
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified federal and local law enforcement authoritiesNotifying state and federal agencies responsible for enforcing privacy laws
Initial access: phishing_link

During the incident: Ascend internal teams worked diligently with forensic consultants to restore and secure the impacted systems
Installation of forensic tools on all systems
Isolation of impacted systems
Implemented additional countermeasures to block further ransomware emails
Upgraded its security measures
Notified federal and local law enforcement authorities
Retained a leading third party cybersecurity firm to investigate
In the process of notifying state and federal agencies responsible for enforcing privacy laws
Changes made: Implemented countermeasures and further upgraded its security systems to prevent future incidents
Secured the services of Kroll to provide identity monitoring at no cost to you for one year
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(148 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 9 states

View merged incident ↗

Montana State AGAug 19 · first

HHS OCR+61d

Maine State AG+65d

California State AG+68d

New Hampshire State AG+68d · this page

Washington State AG+69d

Oregon State AG+69d

Massachusetts State AG+71d

South Carolina State AG+76d

Indiana State AG+76d

Pattern: first filing Aug 19 (MT), last Nov 3 (IN) — a 76-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ascend-clinical-20201026.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 26, 2020
Raw hash: e40995304845e69c66af4b008ae7856a144d2746f12a713b80c0f05165a9ff65

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityAscend Clinical, LLC

Victim entityAscend Clinical, LLC

Incidentdiscovered May 31, 2020

Stated responseAscend internal teams worked diligently with forensic consultants to restore and secure the impacted systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov