Social EngineeringPhishingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICCREDENTIALSMediumContained
Allied Urological Services LLC
bd_9f36d6f87ef9cd83 · schema v1 · pii pii-v1
Full breach record for Allied Urological Services LLC →Allied Urological Services, LLC reported a data security incident involving unauthorized access to an employee's email account used for patient scheduling. The breach occurred between September 26, 2021, and January 3, 2022, affecting one Idaho resident. Compromised data included PHI, SSNs, driver's licenses, and financial account information. The company notified HHS OCR, affected individuals, and media, and provided one year of credit monitoring.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_7ab9011449b66213Maine State AGfiled 2022-07-12(1d gap)Candidate
- bd_e1d89d970030021cNew Hampshire State AGfiled 2022-07-15(2d gap)Verified
Source provenance
- Source URL
- https://ag.idaho.gov/content/uploads/2022/07/07-13-22-Allied-Urological-Service-LLC.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 13, 2022
- Raw hash
- 2b4e631114d10dbdb964ac70a6986b75ea31db16f27d3ef42c6efe2c84e15a9b
Reporting entity
- Name
- Allied Urological Services LLCnorm: allied urological
Victim entity
- Name
- Allied Urological Services LLCnorm: allied urological
Incident
- Discovered
- Jan 3, 2022
- Materiality determined
- —
- Notification sent
- Jul 12, 2022
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICCREDENTIALS
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- notified the U.S. Department of Health and Human Services Office for Civil Rights
- Initial access
- phishing_link
Compliance
- Time to disclose
- 27 weeks(191 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.