Social EngineeringHealthcareHealthcarePhishingCustomer Data InvolvedIdentity (basic)Health (basic)PHIGovernment IDMediumContained

United Regional Health Care System

bd_7306746bb37b9b97 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 1, 2019

Filed

Feb 14, 2020

To disclose

33 weeks

Affected

1state residents only

Linked

4 records

Confidence

66%

Full breach record for United Regional Health Care System →2 incidents on file

United Regional Health Care System notified patients that in July 2019, an unauthorized individual accessed an employee email account containing PHI. The incident was discovered in July 2019, investigated with forensic assistance, and notifications were sent in February 2020. No SSN was involved; misuse is unconfirmed.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 33 weeks / 228 days

Jul 1, 2019

Begins

Jul 1, 2019

Discovered

Feb 14, 2020

Filed

vs. sector median

+24 wks slower

This filing is one of 4 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitedispossessorbd_453585cd970bf9512020-06-21 · +128dVerified by operator

Regulatory filings (2) · sorted by filing gap

HHS OCRbd_9ac6016a07de1b5f2020-02-14Verified
Illinois State AGbd_39c88e6a56be31792020-01-01 · +44dVerified

Name: United Regional Health Care System
norm: united regional health care system
Domain: unitedregional.org

Name: United Regional Health Care System
norm: united regional health care system
Domain: unitedregional.org
Industry: Healthcarellm

Discovered: Jul 1, 2019
Breach occurred: Jul 1, 2019
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 14, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Health (basic)PHIGovernment ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1114 Email Collection
Threat actor: External
Initial access: phishing_link

During the incident: Secured the account
Began an investigation
Hired a leading computer forensic firm to assist
Changes made: Continually evaluate and modify our practices to enhance the security and privacy of our patients’ information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 33 weeks(228 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Illinois State AGJan 1 · first

HHS OCR+44d

Montana State AG+44d · this page

Pattern: first filing Jan 1 (IL), last Feb 14 (MT) — a 44-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/United-CON.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 14, 2020
Raw hash: 83a2da83237fdfa9f82ae17ca696ef30e9655b4fcacbe7aa2f98449d3f1ef129

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityUnited Regional Health Care System

Victim entityUnited Regional Health Care System

Incidentdiscovered Jul 1, 2019

Stated responseSecured the account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov