MalwareRansomwareRansom DemandedData ExfiltratedTargetedPHIIDENTITY_BASICHEALTH_BASICLowActive
Otolaryngology Associates, LLC
bd_75ac7874c8803ec2 · schema v1 · pii pii-v1
Full breach record for Otolaryngology Associates, LLC →Otolaryngology Associates LLC notified consumers of a cyber-attack discovered on Feb 17, 2024. The attacker sent extortion communications. While patient health records were not directly accessed, billing data and PHI (names, DOB, insurance info) were exfiltrated. The company engaged the FBI and forensic investigators.
Vermont clock⏱ VT AG >14 bday6 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_964edcb8ce90ea09Leak Siteinc_ransomfiled 2024-03-27(5d gap)Candidate
Regulatory filings (2) · sorted by filing gap
- bd_2dd1b6d214d35714Indiana State AGfiled 2024-04-02Verified
- bd_60af42c3f436769dMontana State AGfiled 2024-04-01(1d gap)Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-04-02-otolaryngology-associates-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 2, 2024
- Raw hash
- 2ed0df550dc4198f916916626f493ae21a2eda7e6a32c67189a05813fac44fa8
Reporting entity
- Name
- Otolaryngology Associates, LLCnorm: otolaryngology associates
Victim entity
- Name
- Otolaryngology Associates, LLCnorm: otolaryngology associates
Incident
- Discovered
- Feb 17, 2024
- Materiality determined
- —
- Notification sent
- Apr 2, 2024
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1566.002 Spearphishing Link
- Threat actor
- ExternalFinancial
- Regulator citations
- contacting the FBI
- Initial access
- phishing_link
Compliance
- Time to disclose
- 6 weeks(45 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.