HackingHealthcareHealthcareStolen CredentialsDelayed DiscoveryCustomer Data InvolvedFinancial accountIdentity (basic)Government IDPHIHealth (basic)MediumContained

Hillcrest Convalescent Center, Inc.

bd_8323ca8f7ebddc14 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 13, 2025

Filed

Mar 4, 2025

To disclose

19 days

Affected

772state residents only

Linked

11 filings

Confidence

69%

Full breach record for Hillcrest Convalescent Center, Inc. →

Hillcrest Convalescent Center, Inc. reported a cyberattack affecting 772 Washington residents. Unauthorized access occurred between June 27 and July 24, 2024, involving compromised credentials. The breach was discovered on February 13, 2025. Affected data included names, SSNs, and financial account numbers. Credit monitoring was offered.

J jump to incidentP pin to compareR raw source

Washington clock✓ WA AG ≤30d19 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 231 days

discovery → filing · 19 days

Jun 27, 2024

Begins

Feb 13, 2025

Discovered

Mar 4, 2025

Filed

vs. sector median

10 wks faster

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Oregon State AGbd_450c36cd9e72a60b2025-03-04Verified
New Hampshire State AGbd_46c7f364f889c4ed2025-03-04Verified
Maine State AGbd_9de93e16a266605e2025-03-04Verified
California State AGbd_d9983a2b5a6a557c2025-03-04Verified

Show 6 more filings ↓up to 1d gap

HHS OCRbd_f2ba0b9c9e51c63f2025-03-04Verified by operator
Massachusetts State AGbd_f4d64e410a8e28d32025-03-05 · +1dVerified by operator
Maryland State AGbd_55a8a09648ffd05b2025-03-03 · +1dVerified
Montana State AGbd_8b96c2224b4c567a2025-03-03 · +1dVerified
Iowa State AGbd_98eabc481683cfdc2025-03-03 · +1dVerified
Indiana State AGbd_c8248abe92f311602025-03-03 · +1dVerified

Name: Hillcrest Convalescent Center, Inc.
norm: hillcrest convalescent center

Name: Hillcrest Convalescent Center, Inc.
norm: hillcrest convalescent center
Industry: Healthcarellm

Discovered: Feb 13, 2025
Breach occurred: Jun 27, 2024 – Jul 24, 2024
Undetected for: 231 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 23, 2025
Affected individuals: 772state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birthPassport numberHealth insurance IDMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 200-299dexposure 1-99d
WA-stated discovery: Found after the fact
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Filed notification with Washington Attorney General
Initial access: valid_credentials

During the incident: Offering 90 days of complimentary credit monitoring through CyberScout
Providing information on placing security freezes and fraud alerts
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 days(19 days from discovery to filing)
Compliance flags: WA AG ≤30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 11 states

View merged incident ↗

Maryland State AGMar 3 · first

Montana State AGMar 3 · first

Iowa State AGMar 3 · first

Indiana State AGMar 3 · first

Oregon State AG+1d

New Hampshire State AG+1d

Maine State AG+1d

California State AG+1d

HHS OCR+1d

Washington State AG+1d · this page

Massachusetts State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA32599.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 4, 2025
Raw hash: 6af1bf2481da7f3729ac39dbe55986c9280ba52e2857e88b0be42810d6e62c16

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityHillcrest Convalescent Center, Inc.

Victim entityHillcrest Convalescent Center, Inc.

Incidentdiscovered Feb 13, 2025

Stated responseOffering 90 days of complimentary credit monitoring through CyberScout

ComplianceWA AG ≤30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com