MalwareHealthcareProfessional ServicesHealthcareRansomwareData EncryptedCustomer Data InvolvedBusiness Associate (HIPAA)PHIIdentity (basic)Health (basic)LowContained

Practice Resources, LLC

bd_99e0914a03f54fb3 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 12, 2022

Filed

Aug 4, 2022

To disclose

16 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

65%

Full breach record for Practice Resources, LLC →

Practice Resources, LLC, a provider of billing and professional services to healthcare entities, suffered a ransomware attack on April 12, 2022. The incident potentially exposed PHI and PII, including names, addresses, dates of treatment, health plan numbers, and medical record numbers. PRL secured systems, engaged third-party experts, and offered credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 16 weeks / 114 days

Apr 12, 2022

Begins

Apr 12, 2022

Discovered

Aug 4, 2022

Filed

vs. sector median

+4 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_11800686be0a841c2022-08-04Verified
HHS OCRbd_7dc164d37315a5b82022-08-04Verified
New Hampshire State AGbd_d1e9857a3de734942022-07-11 · +24dCandidate

Name: Practice Resources, LLC
norm: practice resources
Domain: static.practicefusion.com

Name: Practice Resources, LLC
norm: practice resources
Domain: prldocs.com
Industry: HealthcarellmProfessional Servicesllm

Discovered: Apr 12, 2022
Breach occurred: Apr 12, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PHIIdentity (basic)Health (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Took immediate steps to secure its systems
Engaged third-party experts to investigate the nature and scope of the Incident
Arranged for IDX to provide free credit monitoring and related services
Changes made: Implemented a series of cybersecurity enhancements
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(114 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGJul 11 · first

Montana State AG+24d

HHS OCR+24d

California State AG+24d · this page

Pattern: first filing Jul 11 (NH), last Aug 4 (CA) — a 24-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-555964
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 4, 2022
Raw hash: 6acef930549c3e992dde2970f59137c5c996fe092cb7cae5e9638feafa3f4afe

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityPractice Resources, LLC

Victim entityPractice Resources, LLC

Incidentdiscovered Apr 12, 2022

Stated responseTook immediate steps to secure its systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov