MalwareHealthcareHealthcareRansomwareRansom DemandedData EncryptedIdentity (basic)Government IDHealth (basic)PHIMediumContained

Marin Medical Practice Concepts, Inc.

bd_9e2d62754731e1f3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 27, 2016

Filed

Nov 16, 2016

To disclose

16 weeks

Affected

1state residents only

Linked

3 filings

Confidence

65%

Eye Institute of Marin notified patients of a ransomware attack on its EMR provider, Marin Medical Practice Concepts, Inc. The attack occurred July 26, 2016. Patient data including SSN, DOB, and medical history was on the system, though forensic investigators found no evidence of unauthorized access or exfiltration. Consultation notes were lost due to a backup failure.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 16 weeks / 112 days

Jul 26, 2016

Begins

Jul 27, 2016

Discovered

Nov 16, 2016

Filed

vs. sector median

+3 wks slower

This filing is one of 3 about the same incident.View merged incident

Part of Marin Medical Practice Concepts, Inc. supply-chain incident (2016) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_e56f3520967835502016-11-17 · +1dVerified
California State AGbd_5d7bc3c6e61d81842016-11-18 · +2dVerified

Name: Eye Institute of Marin
norm: eye institute of marin

Name: Marin Medical Practice Concepts, Inc.
norm: marin medical practice concepts
Industry: Healthcarellm

Discovered: Jul 27, 2016
Breach occurred: Jul 26, 2016
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Nov 16, 2016
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Data elements: Date of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Provider notified law enforcement

During the incident: Notified affected individuals
Reviewed policies and procedures
Discussed matter with electronic medical record provider
Confirmed provider notified law enforcement and secured network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(112 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGNov 16 · first · this page

Massachusetts State AG+1d

California State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Eye-Institute-of-Marin.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 16, 2016
Raw hash: 80fafb58845390476013316325c5b4d2a07c90648826014e532ec60cafdfeaa3

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityEye Institute of Marin

Victim entityMarin Medical Practice Concepts, Inc.

Incidentdiscovered Jul 27, 2016

Stated responseNotified affected individuals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov