HackingHealthcareHealthcareStolen CredentialsTargetedPIIIdentity (basic)PHIHealth (basic)Financial accountLowContained

Aesthetic Dermatology Associates

bd_719fef130ab86340 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 15, 2022

Filed

Oct 10, 2022

To disclose

8 weeks

Affected

1state residents only

Linked

3 records

Confidence

66%

Full breach record for Aesthetic Dermatology Associates →

Aesthetic Dermatology Associates, PC notified individuals of a security incident discovered on August 15, 2022, where an unauthorized actor accessed systems containing personal and health information. Data impacted included names, addresses, DOBs, diagnosis codes, and health insurance info. No SSNs were compromised. The company is reviewing security policies and notifying affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 56 days

Aug 15, 2022

Discovered

Oct 10, 2022

Filed

vs. sector median

1 wks faster

This filing is one of 3 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitebianlianbd_1e91dcbc3e358d9a2022-10-02 · +8dVerified

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_b03a5d1831964cf22022-10-10Verified

Name: Aesthetic Dermatology Associates
norm: aesthetic dermatology associates

Name: Aesthetic Dermatology Associates
norm: aesthetic dermatology associates
Industry: Healthcarellm

Discovered: Aug 15, 2022
Materiality determined: —
Notification sent: Sep 3, 2022
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)PHIHealth (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Promptly began an investigation to confirm the nature and scope of this incident
Reviewing our existing policies, procedures, and systems related to cyber security
Notifying affected individuals
Changes made: Reviewing our existing policies, procedures, and systems related to cyber security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(56 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

HHS OCROct 10 · first

Montana State AGOct 10 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-614.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 10, 2022
Raw hash: ec73c2718e3aed936dececc475a19bd56b9f56311ce07a46b40660d3ad0d1b8c

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityAesthetic Dermatology Associates

Victim entityAesthetic Dermatology Associates

Incidentdiscovered Aug 15, 2022

Stated responsePromptly began an investigation to confirm the nature and scope of this incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov