MalwareHealthcareHealthcareRansomwareSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

LIFELONG MEDICAL CARE

bd_a2e73cbc0dbc19e5 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 9, 2021

Filed

Aug 27, 2021

To disclose

18 days

Affected

Not disclosed

Linked

6 filings

Confidence

65%

Full breach record for LIFELONG MEDICAL CARE →4 incidents on file

LifeLong Medical Care notified customers that a ransomware attack on third-party vendor Netgain resulted in unauthorized access to files containing full names and Social Security Numbers. Netgain discovered anomalous activity on November 24, 2020, and determined files were accessed by February 25, 2021. LifeLong Medical Care confirmed the involvement of customer data on August 9, 2021, and offered one year of complimentary credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 258 days

discovery → filing · 18 days

Nov 24, 2020

Begins

Aug 9, 2021

Discovered

Aug 27, 2021

Filed

vs. sector median

10 wks faster

This filing is one of 6 about the same incident.View merged incident

Part of Netgain Networks supply-chain incident (2021) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_87534f0cb6f63b572021-08-27Verified
HHS OCRbd_44c7006ac0001e2f2021-08-25 · +2dVerified
Montana State AGbd_b8d43a349c42bd352021-08-24 · +3dVerified
New Hampshire State AGbd_3a66e1161d4c79452021-09-01 · +5dVerified

Show 1 more filing ↓up to 11d gap

Oregon State AGbd_375760f91189226b2021-09-07 · +11dVerified by operator

Name: LIFELONG MEDICAL CARE
norm: lifelong medical care

Name: LIFELONG MEDICAL CARE
norm: lifelong medical care
Industry: Healthcarellm

Discovered: Aug 9, 2021
Breach occurred: Nov 24, 2020 – Feb 25, 2021
Undetected for: 258 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Third party: via Netgain

During the incident: Conducted a thorough review of the contents of the acquired files to determine if they contained any sensitive information
Offering a complimentary one-year membership in Equifax Credit WatchTM Gold
Changes made: Working with our third-party vendors to enhance security and oversight
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Montana State AGAug 24 · first

HHS OCR+1d

Massachusetts State AG+3d

California State AG+3d · this page

New Hampshire State AG+8d

Oregon State AG+14d

Pattern: first filing Aug 24 (MT), last Sep 7 (OR) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-544328
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 27, 2021
Raw hash: b260ccaa9223eed7a6708113c1bcfc0251fb4b9bcbb34cb95fe1335e1c8f49d2

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityLIFELONG MEDICAL CARE

Victim entityLIFELONG MEDICAL CARE

Incidentdiscovered Aug 9, 2021

Stated responseConducted a thorough review of the contents of the acquired files to determine if they contained any sensitive information

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov