HackingHealthcareHealthcareStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedEmployee Data InvolvedPIIFinancial accountHealth (basic)LowContained

King County Public Hospital District No. 2

bd_8f9754216de065df · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 1, 2021

Filed

Jul 13, 2021

To disclose

28 weeks

Affected

48state residents only

Linked

3 filings

Confidence

64%

Full breach record for King County Public Hospital District No. 2 →3 incidents on file

EvergreenHealth notified Montana AG of a breach involving patient data (names, insurance, payment info) exposed via Accellion file transfer service compromise. Incident occurred Dec 2020, discovered Jan 2021. No SSN or medical diagnosis data involved.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 31 days

discovery → filing · 28 weeks / 193 days

Dec 1, 2020

Begins

Jan 1, 2021

Discovered

Jul 13, 2021

Filed

vs. sector median

+15 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

HHS OCRbd_ef6f778461d5ecfb2021-07-13Verified
Washington State AGbd_fccb3bd77e21b9fe2021-07-13Verified by operator

Name: King County Public Hospital District No. 2
norm: king county public hospital district no 2

Name: King County Public Hospital District No. 2
norm: king county public hospital district no 2
Also named: King County Public Hospital District No. 2dba oflegal entity
EvergreenHealthdba oftrade name
Industry: Healthcarellm

Discovered: Jan 1, 2021
Breach occurred: Dec 1, 2020 – Dec 31, 2020
Undetected for: 31 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 3, 2021
Affected individuals: 48state-resident count only
Data types: PIIFinancial accountHealth (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Washington State Auditor’s Office (SAO)
Third party: via Accellion
Initial access: valid_credentials

During the incident: Launched an internal investigation to identify the individuals whose information may have been contained in the files involved
Engaged cybersecurity experts to assist with its investigation
Established a dedicated call center to answer questions
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 weeks(193 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 2 states

View merged incident ↗

HHS OCRJul 13 · first

Washington State AGJul 13 · first

Montana State AGJul 13 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/a-notif-80.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 13, 2021
Raw hash: 795f7d5a38ee51a9f55d8269bc403f13a48bd6dd8282e811e4507286f4e00421

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityKing County Public Hospital District No. 2

Victim entityKing County Public Hospital District No. 2

Incidentdiscovered Jan 1, 2021

Stated responseLaunched an internal investigation to identify the individuals whose information may have been contained in the files involved

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov