Social EngineeringHealthcareHealthcarePhishingStolen CredentialsTargetedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)PHIMediumActive

Torrance Memorial Medical Center

bd_980e3f773337cf9b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 20, 2017

Filed

Jun 19, 2017

To disclose

9 weeks

Affected

1state residents only

Linked

6 filings

Confidence

66%

Full breach record for Torrance Memorial Medical Center →2 incidents on file

Torrance Memorial Medical Center reported an email security incident (phishing) occurring April 18-19, 2017, discovered April 20, 2017. Access was gained to two email accounts containing PHI, SSNs, names, DOBs, and addresses. One New Hampshire resident was notified. Investigation ongoing; no evidence of misuse. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 9 weeks / 60 days

Apr 18, 2017

Begins

Apr 20, 2017

Discovered

Jun 19, 2017

Filed

vs. sector median

on median

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_26c7cd2c2f48b2a72017-06-19Candidate
Massachusetts State AGbd_81311245c12685662017-06-19Verified
HHS OCRbd_a054a6bcc12048182017-06-19Verified
California State AGbd_e10c90ac540ec0d72017-06-19Verified

Show 1 more filing ↓up to 18d gap

Montana State AGbd_474742334f1665d52017-07-07 · +18dVerified

Name: Torrance Memorial Medical Center
norm: torrance memorial medical center

Name: Torrance Memorial Medical Center
norm: torrance memorial medical center
Industry: Healthcarellm

Discovered: Apr 20, 2017
Breach occurred: Apr 18, 2017 – Apr 19, 2017
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 19, 2017
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Data elements: Social Security numberDate of birthMedical information
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: reported this incident to the California Department of Public Healthreported this incident to the U.S. Department of Health and Human Servicesreported this incident to the FBInotifying state officials, as required by law
Initial access: phishing_link

During the incident: Launched an investigation, which included working with third-party forensic investigators
Reported this incident to the California Department of Public Health, the U.S. Department of Health and Human Services, and the FBI
Providing all potentially affected individuals access to one (1) free year of credit monitoring services and identity restoration services
Established a dedicated hotline for potentially affected individuals
Providing potentially impacted individuals with guidance on how to better protect against identity theft and fraud
Published notice of this event on their website
Provided notice to statewide media in California
Changes made: Working to implement additional safeguards
Provide additional training to our staff on safeguarding the privacy and security of information on our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(60 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 4 states

View merged incident ↗

Montana State AGJun 19 · first

Massachusetts State AGJun 19 · first

HHS OCRJun 19 · first

California State AGJun 19 · first

New Hampshire State AGJun 19 · first · this page

Montana State AG+18d

Pattern: first filing Jun 19 (MT), last Jul 7 (MT) — a 18-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/torrance-memorial-20170619.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 19, 2017
Raw hash: f0c8b2707d4794488a6a649fd11e43b81a459dd7cff1a2e7933c90004183eb7b

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityTorrance Memorial Medical Center

Victim entityTorrance Memorial Medical Center

Incidentdiscovered Apr 20, 2017

Stated responseLaunched an investigation, which included working with third-party forensic investigators

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov