MalwareHealthcareHealthcareRansomwareData EncryptedTargetedIdentity (basic)Government IDHealth (basic)PIIMediumContained

McAllen Surgical Specialty Center, Ltd.

bd_9392b49543890120 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 14, 2021

Filed

Oct 22, 2021

To disclose

23 weeks

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for McAllen Surgical Specialty Center, Ltd. →2 incidents on file

McAllen Surgical Specialty Center Ltd. notified the Idaho AG of a ransomware incident discovered May 14, 2021. Unauthorized access occurred May 12-14, 2021. One Idaho resident's PII (name, address, SSN, health info) was potentially exposed. The company engaged forensic specialists, provided credit monitoring, and enhanced security policies.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 23 weeks / 161 days

May 12, 2021

Begins

May 14, 2021

Discovered

Oct 22, 2021

Filed

vs. sector median

+10 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_17c595b8766183ad2021-10-22Verified
Massachusetts State AGbd_403c8638aaec0cbe2021-10-26 · +4dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: McAllen Surgical Specialty Center, Ltd.
norm: mcallen surgical specialty center
Domain: mcallensurgicalspecialtycenter.com
Industry: Healthcarellm

Discovered: May 14, 2021
Breach occurred: May 12, 2021 – May 14, 2021
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 22, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PII
Data elements: Social Security numberMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified Idaho Office of the Attorney General

During the incident: Launched an investigation, with the assistance of third-party forensic specialists
Provided notice in an abundance of caution
Providing access to credit monitoring services for one (1) year, through Experian
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Working to implement additional safeguards and training to its employees
Changes made: Reviewing and enhancing existing policies and procedures
Implementing additional safeguards and training to its employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 weeks(161 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGOct 22 · first

Idaho State AGOct 22 · first · this page

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ag.idaho.gov/content/uploads/2022/03/10-22-21-McAllen-Surgical-Specialty-Center-Ltd..pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 22, 2021
Raw hash: f6448aa3af3364ccedf2b3660dafc8c5b69f36a810a6ab71dc7cc47959527948

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityMcAllen Surgical Specialty Center, Ltd.

Incidentdiscovered May 14, 2021

Stated responseLaunched an investigation, with the assistance of third-party forensic specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceag.idaho.gov