MalwareHealthcareHealthcarePhishingRansomwareData EncryptedData ExfiltratedCustomer Data InvolvedPIIPHIIdentity (basic)Health (basic)Government IDHighContained

Ascend Clinical, LLC

bd_80d721f819ea5e74 · schema v1 · pii pii-v1

Severity

High

Discovered

May 31, 2020

Filed

Oct 27, 2020

To disclose

21 weeks

Affected

1,959state residents only

Linked

10 filings

Confidence

67%

Full breach record for Ascend Clinical, LLC →

Ascend Clinical, LLC reported a phishing-induced ransomware incident discovered on May 31, 2020. Attackers accessed PHI and PII of 1,959 Washington residents. Ascend engaged forensic consultants, isolated systems, notified law enforcement, and provided one year of Kroll identity monitoring to affected patients.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d21 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 30 days

discovery → filing · 21 weeks / 149 days

May 1, 2020

Begins

May 31, 2020

Discovered

Oct 27, 2020

Filed

vs. sector median

+9 wks slower

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Oregon State AGbd_affdc1609c7f455a2020-10-27Verified
California State AGbd_43c5891ca65999ef2020-10-26 · +1dVerified
New Hampshire State AGbd_6f928c60b9b634a02020-10-26 · +1dVerified
Massachusetts State AGbd_0c3f5760dbb44d4b2020-10-29 · +2dVerified by operator

Show 5 more filings ↓up to 69d gap

Maine State AGbd_6882f24b5e369f8a2020-10-23 · +4dVerified
South Carolina State AGbd_36cb93c68b6198c62020-11-03 · +7dVerified
Indiana State AGbd_9b91d1eadde4c40b2020-11-03 · +7dVerified
HHS OCRbd_fc6b4a302719f9a02020-10-19 · +8dVerified by operator
Montana State AGbd_31fe7e79e05ba1e32020-08-19 · +69dCandidate

Name: Ascend Clinical, LLC
norm: ascend clinical
Domain: labcheck5.com

Name: Ascend Clinical, LLC
norm: ascend clinical
Domain: labcheck5.com
Industry: Healthcarellm

Discovered: May 31, 2020
Breach occurred: May 1, 2020 – May 31, 2020
Undetected for: 30 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 28, 2020
Affected individuals: 1,959state-resident count only
Data types: PIIPHIIdentity (basic)Health (basic)Government ID
Data elements: NameSocial Security numberMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found after the fact
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: notified federal and local law enforcement authoritiesnotifying state and federal agencies responsible for enforcing privacy laws
Initial access: phishing_link

During the incident: Ascend internal teams worked diligently with forensic consultants to restore and secure the impacted systems
Installation of forensic tools on all systems
Isolation of impacted systems
Implemented additional countermeasures to block further ransomware emails
Notified federal and local law enforcement authorities
Retained a leading third party cybersecurity firm to investigate
Securing the services of Kroll to provide identity monitoring
Changes made: Upgraded its security measures to prevent future attacks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(149 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 9 states

View merged incident ↗

Montana State AGAug 19 · first

HHS OCR+61d

Maine State AG+65d

California State AG+68d

New Hampshire State AG+68d

Oregon State AG+69d

Washington State AG+69d · this page

Massachusetts State AG+71d

South Carolina State AG+76d

Indiana State AG+76d

Pattern: first filing Aug 19 (MT), last Nov 3 (IN) — a 76-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10347.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 27, 2020
Raw hash: 0eb066eed5ae132c2c225723879762e8c8b16bd1bff160563faff6c1144cfb11

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityAscend Clinical, LLC

Victim entityAscend Clinical, LLC

Incidentdiscovered May 31, 2020

Stated responseAscend internal teams worked diligently with forensic consultants to restore and secure the impacted systems

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com