DisclosureLens
MalwareHealthcareHealthcareRansomwareData EncryptedRansom DemandedCustomer Data InvolvedPHIIdentity (basic)Government IDHealth (basic)MediumContained

The SurgiCare Center of Utah

bd_a6342d44227a3a11 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 21, 2020

Filed

Mar 19, 2021

To disclose

13 weeks

Affected

1state residents only

Linked

4 filings

Confidence

67%
Full breach record for The SurgiCare Center of Utah2 incidents on file

The SurgiCare Center of Utah, an eye surgical center, detected a ransomware attack on December 21, 2020. An unauthorized third party infiltrated the network, encrypted files, and demanded ransom. Potentially exposed data for one New Hampshire resident included name, address, SSN, and electronic health records. The organization engaged IT specialists, secured its network, and offered 12 months of identity monitoring via Kroll.

Incident timeline

discovery → filing · 13 weeks / 88 days

Dec 21, 2020

Discovered

Mar 19, 2021

Filed

vs. sector median

+2 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
Montana State AGMar 16 · first
Indiana State AGMar 16 · first
New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.