AccidentalHealthcareHealthcareMisdeliveryCustomer Data InvolvedPIIHealth (basic)LowContained

Unite Health Share Ministries

bd_9739ca70f78e8b08 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 15, 2025

Filed

Mar 10, 2025

To disclose

8 weeks

Affected

1state residents only

Linked

3 filings

Confidence

64%

Unite Health Share Ministries notified Montana residents that a third-party contractor inadvertently uploaded a document containing confidential health share policy numbers and dates of birth to a public site on Jan 15, 2025. The document was deleted immediately. No SSN or banking info was involved. Credit monitoring and fraud assistance are offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 54 days

Jan 15, 2025

Begins

Jan 15, 2025

Discovered

Mar 10, 2025

Filed

vs. sector median

3 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_fd1c27ad029ffc032025-03-10Verified
California State AGbd_879dfcecec654dc32025-03-11 · +1dVerified

Name: United Faith Ministries, Inc.
norm: united faith ministries

Name: Unite Health Share Ministries
norm: unite health share ministries
Industry: Healthcarellm

Discovered: Jan 15, 2025
Breach occurred: Jan 15, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 7, 2025
Affected individuals: 1state-resident count only
Data types: PIIHealth (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1074 Data Staged
Threat actor: Partner
Initial access: trusted_relationship

During the incident: Engaged external cybersecurity experts
Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance through Cyberscout
Changes made: Implementing additional safeguards and enhanced security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(54 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGMar 10 · first

Montana State AGMar 10 · first · this page

California State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/03/Consumer-notification-letter-224.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 10, 2025
Raw hash: 10750a2b1ead654c2ab5ef7d8756a5651cb724da94be74b9bbb709a1ccf27332

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityUnited Faith Ministries, Inc.

Victim entityUnite Health Share Ministries

Incidentdiscovered Jan 15, 2025

Stated responseEngaged external cybersecurity experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov