HackingHealthcareTechnologyHealthcareStolen CredentialsCustomer Data InvolvedPIIPHIHealth (basic)Identity (basic)LowContained

Keck Medicine of USC

bd_8c5b6f345281b7b9 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 14, 2022

Filed

Sep 30, 2022

To disclose

24 weeks

Affected

31state residents only

Linked

4 filings

Confidence

66%

Full breach record for Keck Medicine of USC →2 incidents on file

Conifer Revenue Cycle Solutions, LLC notified Keck Medicine of USC patients of a data breach where an unauthorized party accessed a business email account between Jan 20 and Apr 14, 2022. Data potentially included PII, PHI, and billing info. No SSN or financial account numbers were involved.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 84 days

discovery → filing · 24 weeks / 169 days

Jan 20, 2022

Begins

Apr 14, 2022

Discovered

Sep 30, 2022

Filed

vs. sector median

+12 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_c9a09807bc475d4a2022-09-30Verified
California State AGbd_fa3e3127616abfc82022-09-30Verified
HHS OCRbd_845e68edb765044c2022-11-29 · +60dCandidate

Name: Conifer Revenue Cycle Solutions, LLC
norm: conifer revenue cycle

Name: Keck Medicine of USC
norm: keck medicine of usc
Domain: keckmedicine.org
Industry: HealthcarellmTechnologyllm

Discovered: Apr 14, 2022
Breach occurred: Jan 20, 2022
Undetected for: 84 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 30, 2022
Affected individuals: 31state-resident count only
Data types: PIIPHIHealth (basic)Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Immediately took action to block malicious IP addresses and URLs
Password for the impacted account was reset shortly after the unauthorized access
Enhanced and continue to enhance our security controls and monitoring practices
Accelerated our implementation of multi-factor authentication for business email accounts
Changes made: Accelerated our implementation of multi-factor authentication for business email accounts within the environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 weeks(169 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 3 states

View merged incident ↗

Massachusetts State AGSep 30 · first

California State AGSep 30 · first

Montana State AGSep 30 · first · this page

HHS OCR+60d

Pattern: first filing Sep 30 (MA), last Nov 29 (CA) — a 60-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-595.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 30, 2022
Raw hash: db8bc532abf99e37d3fbca31a078622f5920d4916338d5dad2afda55ba27b2dc

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityConifer Revenue Cycle Solutions, LLC

Victim entityKeck Medicine of USC

Incidentdiscovered Apr 14, 2022

Stated responseImmediately took action to block malicious IP addresses and URLs

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov