HackingHealthcareHealthcareStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)Financial accountLowContained

South Texas Oncology and Hematology, PLLC

bd_7cf440ecd573dd96 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 15, 2024

Filed

Jun 17, 2024

To disclose

18 weeks

Affected

15state residents only

Linked

6 filings

Confidence

66%

Full breach record for South Texas Oncology and Hematology, PLLC →

South Texas Oncology and Hematology, PLLC notified the New Hampshire AG of a cybersecurity incident discovered on Feb 15, 2024. The breach affected 15 NH residents, involving PII and financial account data. STOH engaged forensic investigators, contained the network, reported to the FBI, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 18 weeks / 123 days

Feb 15, 2024

Begins

Feb 15, 2024

Discovered

Jun 17, 2024

Filed

vs. sector median

+7 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_e611af7c889253542024-06-18 · +1dVerified
Maine State AGbd_bdbf2714544b67712024-06-13 · +4dVerified
Montana State AGbd_cbd48682a3249f6c2024-06-13 · +4dVerified
Indiana State AGbd_d58cb98b736f71172024-06-13 · +4dVerified

Show 1 more filing ↓up to 59d gap

HHS OCRbd_ddfc9fab5fbd81f62024-04-19 · +59dVerified

Name: Wilson Elser Moskowitz Edelman and Dicker LLP
norm: wilson elser Moskowitz Edelman and Dicker

Name: South Texas Oncology and Hematology, PLLC
norm: south texas oncology and hematology
Industry: Healthcarellm

Discovered: Feb 15, 2024
Breach occurred: Feb 15, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 13, 2024
Affected individuals: 15state-resident count only
Data types: PIIIdentity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Provided notice to various regulators in March and April 2024Reported this incident to the FBI
Initial access: valid_credentials

During the incident: Immediately disconnected all access to the network
Engaged a specialized third-party cybersecurity firm to assist with securing the environment and conducting a comprehensive forensic investigation
Provided notice to law enforcement and various regulators in March and April 2024
Posted notice of the Incident on its website
Reported this incident to the FBI
Offering complimentary credit monitoring and identity theft restoration services through CyberScout to all affected New Hampshire residents
Changes made: Employed appropriate protective and corrective measures to protect the integrity of its systems infrastructure and data
IT team worked to contain the situation and to isolate and rebuild affected machines
Various security tools were updated
New automated protections were built to prevent a similar incident from occurring
Restored and verified the integrity of backups for any presence of malware before bringing systems back online
Enhanced its security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(123 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

HHS OCRApr 19 · first

Maine State AG+55d

Montana State AG+55d

Indiana State AG+55d

New Hampshire State AG+59d · this page

Massachusetts State AG+60d

Pattern: first filing Apr 19 (TX), last Jun 18 (MA) — a 60-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/south-texas-oncology-hematology-20240617.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 17, 2024
Raw hash: fb32c5f7d1359bae35f7df47d44910f72fc103330b4610b9612d0a8e084175d0

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityWilson Elser Moskowitz Edelman and Dicker LLP

Victim entitySouth Texas Oncology and Hematology, PLLC

Incidentdiscovered Feb 15, 2024

Stated responseImmediately disconnected all access to the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov