HackingHealthcareHealthcareStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

King of Prussia Dental Associates

bd_73f49733d6766535 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 23, 2016

Filed

Sep 8, 2016

To disclose

11 weeks

Affected

3state residents only

Linked

2 filings

Confidence

64%

Full breach record for King of Prussia Dental Associates →2 incidents on file

King of Prussia Dental Associates notified Montana DOJ of unauthorized access to its server between March 28 and June 5, 2016, discovered June 23, 2016. Data included names, SSNs, DOBs, addresses, account numbers, and treatment records. No evidence of misuse found, but not ruled out. Forensics engaged, law enforcement notified, systems secured, and credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 87 days

discovery → filing · 11 weeks / 77 days

Mar 28, 2016

Begins

Jun 23, 2016

Discovered

Sep 8, 2016

Filed

vs. sector median

2 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_c633fbcf1b0c1fc92016-09-12 · +4dVerified

Name: King of Prussia Dental Associates
norm: king of prussia dental associates

Name: King of Prussia Dental Associates
norm: king of prussia dental associates
Industry: Healthcarellm

Discovered: Jun 23, 2016
Breach occurred: Mar 28, 2016 – Jun 5, 2016
Undetected for: 87 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 9, 2016
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: contacted law enforcement
Initial access: valid_credentials

During the incident: Launched an investigation
Hired a leading forensics firm
Contacted law enforcement
Server was immediately taken out of operation
Enhance the security of our systems
Improve our data security on our web server infrastructure
Strengthening our existing network firewalls
Incorporating best practices in IT security
Offering identity theft protection services through ID Experts
Changes made: Improve our data security on our web server infrastructure
Strengthening our existing network firewalls
Incorporating best practices in IT security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(77 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGSep 8 · first · this page

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/King-of-Prussia-Dental-Association-KOP.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 8, 2016
Raw hash: 01cc7e7547e555a9edcfb2fa76da3f268b9938b1c838958aeba5c52ee5cdeb79

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityKing of Prussia Dental Associates

Victim entityKing of Prussia Dental Associates

Incidentdiscovered Jun 23, 2016

Stated responseLaunched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov