BST & CO. CPAS, LLP
bd_90095c1200eb1d11 · schema v1 · pii pii-v1
Full breach record for BST & CO. CPAS, LLP →BST & Co., CPAs, LLP notified patients of Community Care Physicians, P.C. of a data incident where a virus infected BST's network from Dec 4-7, 2019. The virus encrypted files. BST engaged forensic investigators. PHI and basic identity info may have been accessed. No SSN or medical records were impacted. One year of Equifax identity monitoring is offered.
J jump to incidentP pin to compareR raw source
Incident timeline
Dec 4, 2019
Begins
Dec 7, 2019
Discovered
Feb 14, 2020
Filed
vs. sector median
9 wks faster
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- HHS OCRbd_395dfa1f41dabd9d2020-02-16 · +2dVerified
- Massachusetts State AGbd_f7e7633fab25d7782020-02-25 · +11dVerified
- HHS OCR enforcementbd_b1c08cec54ba479d2025-08-18 · +2012dVerified by operator
Filing propagation · 4 filings · 3 states
View merged incident ↗Pattern: first filing Feb 14 (MT), last Aug 18 — a 2012-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.