MalwareHealthcareHealthcareRansomwareData EncryptedTargetedIdentity (basic)Government IDPHIPIIHealth (basic)HighContained

CellNetix Pathology and Laboratories

bd_972311a26a471de1 · schema v1 · pii pii-v1

Severity

High

Discovered

Dec 10, 2023

Filed

Jan 10, 2024

To disclose

4 weeks

Affected

1,146state residents only

Linked

5 filings

Confidence

69%

Full breach record for CellNetix Pathology and Laboratories →3 incidents on file

CellNetix Pathology and Laboratories reported a ransomware incident on Dec 10, 2023, affecting 1,146 Washington employees. Data exposed included names, SSNs, driver's licenses, DOBs, and health insurance IDs. The company engaged forensic investigators, secured the network, and provided credit monitoring services.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d4 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 4 weeks / 31 days

Dec 10, 2023

Begins

Dec 10, 2023

Discovered

Jan 10, 2024

Filed

vs. sector median

8 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_fc8aebd8cbf46b2a2024-01-10Candidate
New Hampshire State AGbd_f4f4b8005e6fbff02024-01-09 · +1dVerified
Indiana State AGbd_960b6e35f292aa8c2024-01-08 · +2dVerified
Montana State AGbd_af11f75a967e4f522024-01-08 · +2dCandidate

Name: CellNetix Pathology and Laboratories
norm: cellnetix pathology and laboratories

Name: CellNetix Pathology and Laboratories
norm: cellnetix pathology and laboratories
Industry: Healthcarellm

Discovered: Dec 10, 2023
Breach occurred: Dec 10, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 8, 2024
Affected individuals: 1,146state-resident count only
Data types: Identity (basic)Government IDPII
Data elements: NameSocial Security numberDriver's licence numberDate of birthMilitary ID numberPassport numberHealth insurance ID
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 0dexposure 0d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Immediately shut off all access to the network
Engaged a specialized third-party forensic incident response firm to assist with securing the network environment and investigating the extent of unauthorized activity
Changes made: Made immediate enhancements to our systems and security
Engaged appropriate experts to assist us in conducting a full review of our security practices and systems to ensure that enhanced security protocols are in place going forward
Providing you with access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing you with proactive fraud assistance
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGJan 8 · first

Montana State AGJan 8 · first

New Hampshire State AG+1d

Maine State AG+2d

Washington State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA27519.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 10, 2024
Raw hash: 0ac1498a6856b02d6e4e18805ebcec8eb9659f592ebbff6a5ad6e82f8147084a

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityCellNetix Pathology and Laboratories

Victim entityCellNetix Pathology and Laboratories

Incidentdiscovered Dec 10, 2023

Stated responseImmediately shut off all access to the network

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com