DisclosureLens
HackingHealthcareTechnologyHealthcareStolen CredentialsCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDHealth (basic)PHIMediumContained

MCG Health, LLC

bd_8779641a7cb24f1a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 25, 2022

Filed

Jun 27, 2022

To disclose

13 weeks

Affected

9state residents only

Linked

11 filings

Confidence

66%
Full breach record for MCG Health, LLC

MCG Health, LLC, a vendor for Providence St. Joseph Health, experienced unauthorized access to a file containing patient PHI (SSNs, DOBs, medical codes, names) on March 25, 2022. Providence notified affected individuals on June 27, 2022, offering 1 year of identity protection. MCG engaged forensic investigators and law enforcement.

Incident timeline

discovery → filing · 13 weeks / 94 days

Mar 25, 2022

Discovered

Jun 27, 2022

Filed

vs. sector median

+1 wks slower

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filingsup to 177d gap

Filing propagation · 11 filings · 8 states

View merged incident ↗

Pattern: first filing Jan 1 (IL), last Jul 8 (NH) — a 188-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.