Social EngineeringHealthcareHealthcarePhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountPIIMediumContained

Meadville Medical Center

bd_7454030fe0961f6c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 21, 2020

Filed

Mar 6, 2020

To disclose

6 weeks

Affected

3state residents only

Linked

3 filings

Confidence

66%

Full breach record for Meadville Medical Center →

Meadville Medical Center notified affected individuals of a data security incident involving unauthorized access to its Meditech HR/payroll system. Access was gained via phishing credentials between Dec 5, 2019 and Jan 21, 2020. Data exposed included names, SSNs, driver's licenses, and financial account info. The company secured the system, notified law enforcement, engaged forensic IT assistance, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 47 days

discovery → filing · 6 weeks / 45 days

Dec 5, 2019

Begins

Jan 21, 2020

Discovered

Mar 6, 2020

Filed

vs. sector median

6 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_1a88119de457007e2020-03-06Candidate
Indiana State AGbd_4d565c05b12b6c2d2020-03-06Verified

Name: Meadville Medical Center
norm: meadville medical center

Name: Meadville Medical Center
norm: meadville medical center
Industry: Healthcarellm

Discovered: Jan 21, 2020
Breach occurred: Dec 5, 2019 – Jan 21, 2020
Undetected for: 47 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDFinancial accountPII
Data elements: Social Security numberDate of birth
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcementNotifying the IRS and state taxing authorities
Initial access: phishing_link

During the incident: Secured the Meditech human resources and payroll system
Notified law enforcement
Launched an investigation with the assistance of an outside professional IT security firm
Engaged Experian to offer complimentary one-year membership of Experian’s IdentityWorks
Changes made: Implemented multi-factor authentication for remote access to email
Providing additional cybersecurity training to employees
Notifying the IRS and state taxing authorities of the incident
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(45 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGMar 6 · first

Indiana State AGMar 6 · first

Montana State AGMar 6 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/General-Notice-71.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 6, 2020
Raw hash: abd19d87726900612ff33fc31e21da92344e5e04924fca1bdff9716d56a834db

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMeadville Medical Center

Victim entityMeadville Medical Center

Incidentdiscovered Jan 21, 2020

Stated responseSecured the Meditech human resources and payroll system

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov