MalwareHealthcareHealthcareRansomwareData EncryptedData ExfiltratedCustomer Data InvolvedPHIGovernment IDIdentity (basic)Health (basic)Financial accountMediumContained

Florida Orthopaedic Institute

bd_9b712997a5d8567e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 9, 2020

Filed

Jun 22, 2020

To disclose

11 weeks

Affected

Not disclosed

Linked

6 filings

Confidence

65%

Florida Orthopaedic Institute (FOI) experienced a ransomware attack between April 6 and April 9, 2020, which encrypted data on its servers. FOI discovered the incident on April 9, 2020. An investigation concluded on May 6, 2020, that patient personal information, including names, dates of birth, Social Security numbers, and medical information, may have been accessed or taken. FOI engaged third-party forensic investigators and provided identity monitoring services through Kroll to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

discovery → filing · 11 weeks / 74 days

Apr 6, 2020

Begins

Apr 9, 2020

Discovered

Jun 22, 2020

Filed

vs. sector median

2 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_012235dae82ea25b2020-06-22Candidate
Massachusetts State AGbd_82e8625c5ca8d7de2020-06-22Verified
New Hampshire State AGbd_f8e2e4feb154cc092020-06-22Verified
Indiana State AGbd_fae168e43f6afb9f2020-06-22Verified

Show 1 more filing ↓up to 9d gap

HHS OCRbd_811b98dae592a09c2020-07-01 · +9dVerified

Name: Florida Orthopaedic Institute
norm: florida orthopaedic institute

Name: Florida Orthopaedic Institute
norm: florida orthopaedic institute
Industry: Healthcarellm

Discovered: Apr 9, 2020
Breach occurred: Apr 6, 2020 – Apr 9, 2020
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PHIGovernment IDIdentity (basic)Health (basic)Financial account
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial

During the incident: Began an internal investigation to secure our environment and restore impacted data
Engaged a third-party forensic investigator to assist us with the investigation
Secured the services of Kroll to provide identity monitoring at no cost to you
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(74 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Montana State AGJun 22 · first

Massachusetts State AGJun 22 · first

New Hampshire State AGJun 22 · first

Indiana State AGJun 22 · first

California State AGJun 22 · first · this page

HHS OCR+9d

Pattern: first filing Jun 22 (MT), last Jul 1 (FL) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-191210
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 22, 2020
Raw hash: e75c7611332c0de13b28fff51f33fab2b26e416fc422ac6a9679881c38e17bf5

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityFlorida Orthopaedic Institute

Victim entityFlorida Orthopaedic Institute

Incidentdiscovered Apr 9, 2020

Stated responseBegan an internal investigation to secure our environment and restore impacted data

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov