TEXASSocial EngineeringHealthcareHealthcarePhishingStolen CredentialsBusiness Associate (HIPAA)Customer Data InvolvedData ExfiltratedMulti-Stage ChainPHIHealth (basic)Identity (basic)Government IDFinancial accountCriticalResolved

Centerstone Insurance and Financial Services

bd_9c015700bbaf6ff8 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Oct 11, 2018

Filed

Jan 3, 2019

To disclose

12 weeks

Affected

111,589

Linked

5 filings

Confidence

66%

Full breach record for Centerstone Insurance and Financial Services →

Centerstone Insurance and Financial Services (dba BenefitMall) reported to HHS on 2019-01-03 a Hacking/IT Incident affecting 111,589 individuals. Breached information located on Email. Phishing attack led to ePHI exfiltration including names, SSNs, and financial data.

J jump to incidentP pin to compareR raw source

HIPAA clockDiscovered Oct 11, 2018 → Notified Jan 3, 2019✓ HHS notified12 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 12 weeks / 84 days

Oct 11, 2018

Begins

Oct 11, 2018

Discovered

Jan 3, 2019

Filed

vs. sector median

+3 wks slower

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_6597bcaa32aef3bc2019-01-03Verified
California State AGbd_733d2f7e19d9c59a2019-01-03Candidate
Montana State AGbd_5ca31287f9bb6f312019-01-04 · +1dVerified
New Hampshire State AGbd_b45f9463b10cb0b12019-01-08 · +5dVerified

Name: Centerstone Insurance and Financial Services
norm: centerstone insurance and financial
Domain: benefitmall.com
Industry: Business Associate

Name: Centerstone Insurance and Financial Services
norm: centerstone insurance and financial
Domain: benefitmall.com
Also named: Centerstone Insurance and Financial Servicesdba oflegal entity
BenefitMalldba oftrade name
Industry: Healthcaresource default

Discovered: Oct 11, 2018
Breach occurred: Oct 11, 2018
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 3, 2019
Affected individuals: 111,589nationwide
Data types: PHIHealth (basic)Identity (basic)Government IDFinancial account
HHS breach type: Hacking / IT incident
Where the data lived: Email
Covered-entity type: Business associate
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified HHS OCROCR investigation conducted
Third party: via Centerstone Insurance & Financial Services dba BenefitMallbusiness associate
Initial access: phishing_link

During the incident: Implemented new technical safeguards to its e-mail platform
Provided targeted re-training to involved workforce members on its policies and procedures related to e-mail security
Provided affected individuals with one year of free credit monitoring services
Changes made: Implemented new technical safeguards to its e-mail platform
Provided targeted re-training to involved workforce members on its policies and procedures related to e-mail security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(84 days from discovery to filing)
Compliance flags: HHS notified
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: Oct 11, 2018
→ Notified: Jan 3, 2019
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: Oct 11, 2018 → Notified: Jan 3, 2019	—	regulatory submission	HHS notified

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Massachusetts State AGJan 3 · first

California State AGJan 3 · first

HHS OCRJan 3 · first · this page

Montana State AG+1d

New Hampshire State AG+5d

Pattern: first filing Jan 3 (MA), last Jan 8 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Jan 3, 2019
Raw hash: f498aed13fe0ac9d7ca3b644e0e46a554dbc026619e499e432d876a412e8a677

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html1.8 KB

Download View at source

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityCenterstone Insurance and Financial Services

Victim entityCenterstone Insurance and Financial Services

Incidentdiscovered Oct 11, 2018

Stated responseImplemented new technical safeguards to its e-mail platform

ComplianceHHS notified

Extraction provenanceno artifact recorded

Source provenanceocrportal.hhs.gov

Source filing