HackingHealthcareHealthcareStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

Southeastern Orthopaedic Specialists, PA

bd_8d8d768045dd17eb · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Dec 27, 2023

To disclose

—

Affected

2state residents only

Linked

3 records

Confidence

67%

Full breach record for Southeastern Orthopaedic Specialists, PA →

Southeastern Orthopaedic Specialists, PA notified patients of a network security incident where an unauthorized external party temporarily accessed the network. Exposed data included names, demographics, and visit reasons. No financial info or SSNs were compromised. The company engaged forensic specialists, notified law enforcement, and provided 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Dec 27, 2023

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 3 records about the same incident.View merged incident

A leak claim by noescape about this victim was first seen 43 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitenoescapebd_bca74d3625ff28322023-10-25 · +63dVerified

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_108aefee288a86ab2023-12-21 · +6dVerified

Name: Southeastern Orthopaedic Specialists, PA
norm: southeastern orthopaedic specialists

Name: Southeastern Orthopaedic Specialists, PA
norm: southeastern orthopaedic specialists
Industry: Healthcarellm

Discovered: —
Materiality determined: —
Notification sent: Dec 19, 2023
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: reported this matter to law enforcement
Initial access: valid_credentials

During the incident: Initiated its incident response plan
Fully securing our network and the data that we maintain
Conducted an investigation with the assistance of third-party forensic specialists
Reported this matter to law enforcement
Providing you with access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Scoreservices at no charge
Providing you with proactive fraud assistance
Changes made: Reviewing our tools, policies, and procedures relating to the security of our systems and servers
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >30d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

HHS OCRDec 21 · first

Montana State AG+6d · this page

Pattern: first filing Dec 21 (NC), last Dec 27 (MT) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-984.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 27, 2023
Raw hash: ee2678fee34f5c38a942e0c783ae27bfa6f8a8629d1f418145d1e04d5792e1eb

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entitySoutheastern Orthopaedic Specialists, PA

Victim entitySoutheastern Orthopaedic Specialists, PA

IncidentUnauthorized Access

Stated responseInitiated its incident response plan

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov