MalwareHealthcareHealthcareRansomwareCustomer Data InvolvedData EncryptedPHIHealth (basic)Identity (basic)LowActive

National Capital Poison Center

bd_82528aea2f34c643 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 1, 2017

Filed

Dec 8, 2017

To disclose

10 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

65%

Full breach record for National Capital Poison Center →

National Capital Poison Center (NCPC) experienced a ransomware infection in October 2017. Unauthorized access to a database server occurred on October 21, 2017. The database contained caller information including names, dates of birth, addresses, phone numbers, email addresses, and clinical information. NCPC launched an investigation with third-party forensic investigators and is monitoring systems. Notice was sent on December 8, 2017.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 21, 2017

Begins

Dec 8, 2017

Filed

vs. sector median

3 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Oregon State AGbd_21f4358ded85492e2017-12-08Candidate
Montana State AGbd_402b447df6febfd12017-12-08Verified

Name: National Capital Poison Center
norm: national capital poison center
Domain: poison.org

Name: National Capital Poison Center
norm: national capital poison center
Domain: poison.org
Industry: Healthcarellm

Discovered: Oct 1, 2017
Breach occurred: Oct 21, 2017
Materiality determined: —
Notification sent: Dec 8, 2017
Affected individuals: Not disclosed
Data types: PHIHealth (basic)Identity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External
Regulator citations: Issued notice of this incident to certain state and foreign regulators

During the incident: Launched an investigation with the assistance of a third-party forensic investigator
Ensured the security of its information systems
Actively monitoring its information systems for suspicious activity
Posted notice of this incident on its website
Issued notice of this incident to, or published notice of this incident in, media serving certain states
Providing written notice of this incident to you, to certain state and foreign regulators, and to the consumer reporting agencies
Established a dedicated assistance line for individuals seeking additional information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(68 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Oregon State AGDec 8 · first

Montana State AGDec 8 · first

California State AGDec 8 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-130874
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 8, 2017
Raw hash: 3a8a16ef5710828824651633d66856167ad62be1744c825a53fd801dccefbb10

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityNational Capital Poison Center

Victim entityNational Capital Poison Center

Incidentdiscovered Oct 1, 2017

Stated responseLaunched an investigation with the assistance of a third-party forensic investigator

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov