HackingHealthcareHealthcareCustomer Data InvolvedPHIIdentity (basic)Government IDHealth (basic)MediumContained

Radiology Ltd.

bd_a726c338461d04bb · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 24, 2021

Filed

Oct 7, 2022

To disclose

41 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for Radiology Ltd. →

Radiology Ltd. reported that between December 17 and December 24, 2021, an unauthorized party gained access to its network containing patient information. The incident was identified on December 24, 2021. Affected data may include names, addresses, dates of birth, Social Security numbers, health insurance information, medical record numbers, and radiology service details. The company notified law enforcement, engaged a forensic firm, and is offering one year of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Dec 24, 2021 → Notified Sep 2, 2022252d ✗ CA 60-day late41 weeks discovery → filing

Incident timeline

undetected · 7 days

discovery → filing · 41 weeks / 287 days

Dec 17, 2021

Begins

Dec 24, 2021

Discovered

Oct 7, 2022

Filed

vs. sector median

+30 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Montana State AGbd_7ac12f4551e11a072022-09-02 · +35dCandidate

Name: Radiology Ltd.
norm: radiology

Name: Radiology Ltd.
norm: radiology
Industry: Healthcarellm

Discovered: Dec 24, 2021
Breach occurred: Dec 17, 2021 – Dec 24, 2021
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 2, 2022
Affected individuals: Not disclosed
Data types: PHIIdentity (basic)Government IDHealth (basic)
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified law enforcement

During the incident: Initiated our incident response process
Notified law enforcement
Began an investigation with the assistance of a forensic firm
Offering a complimentary one-year membership to Equifax Credit WatchTM Gold
Changes made: Implementing additional safeguards and enhancements to our information security, systems, and monitoring capabilities
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 41 weeks(287 days from discovery to filing)
Compliance flags: CA 60-day late · 252d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Dec 24, 2021
→ Notified: Sep 2, 2022
252d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Dec 24, 2021 → Notified: Sep 2, 2022	252d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGSep 2 · first

California State AG+35d · this page

Pattern: first filing Sep 2 (MT), last Oct 7 (CA) — a 35-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-557994
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 7, 2022
Raw hash: c8b8d8e6fba37d701de7a8104f03c46cdebd07a4985da4814b29894b04224af9

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityRadiology Ltd.

Victim entityRadiology Ltd.

Incidentdiscovered Dec 24, 2021

Stated responseInitiated our incident response process

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov