MalwareRansomwareTroldeshShadeData EncryptedCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
East Valley Community Health Center, Inc.
bd_9d07648926f3f53f · schema v1 · pii pii-v1
Full breach record for East Valley Community Health Center, Inc. →East Valley Community Health Center, Inc. experienced a ransomware attack on October 18, 2016, when an unknown individual accessed a server and installed Troldesh/Shade malware, encrypting files containing patient health information. Affected data included names, dates of birth, addresses, medical record numbers, health diagnosis codes, and insurance account numbers. Social security numbers and driver's license numbers were not involved. The organization notified regulators and affected patients in December 2016.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_6fe657ca85d48e1bHHS OCRfiled 2016-12-15(9d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-65226
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 6, 2016
- Raw hash
- 109e1a28566fd56139649ebb172a46c94aab37851fc325058493093691098dba
Reporting entity
- Name
- East Valley Community Health Center, Inc.norm: east valley community health center
- Domain
- evchc.org
Victim entity
- Name
- East Valley Community Health Center, Inc.norm: east valley community health center
- Domain
- evchc.org
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Dec 14, 2016
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- External
- Regulator citations
- Notified the California Department of Public Health and the California Attorney General’s office of this incidentNotified the US Department of Health and Human Services of this incident
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.