HackingHealthcareHealthcareDelayed DiscoveryIdentity (basic)PIILowContained

Tift Regional Health System, Inc.

bd_a89891e2972f07c6 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 16, 2022

Filed

Aug 11, 2023

To disclose

51 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

66%

Full breach record for Tift Regional Health System, Inc. →2 incidents on file

Tift Regional Health System, Inc. notified consumers of unauthorized access to certain systems between August 11-17, 2022. Suspicious activity was detected on August 16, 2022. The incident involved unauthorized copying of files containing names. No PHI or financial data was accessed. The network was disabled and restored. 12 months of credit monitoring via Experian was offered. Approximately 5 Rhode Island residents were identified as potentially impacted.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday51 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 5 days

discovery → filing · 51 weeks / 360 days

Aug 11, 2022

Begins

Aug 16, 2022

Discovered

Aug 11, 2023

Filed

vs. sector median

+42 wks slower

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Indiana State AGbd_2b06832411717b702023-08-11Verified
Massachusetts State AGbd_3e7a80cad768f0302023-08-11Verified
New Hampshire State AGbd_60b48ef13cc744962023-08-11Verified
Maine State AGbd_b354425a6bde95ca2023-08-11Candidate

Show 2 more filings ↓up to 3d gap

Montana State AGbd_bf7fe1ed08c8b1252023-08-11Verified
South Carolina State AGbd_b50cce6c5ee82d812023-08-14 · +3dVerified

Name: Tift Regional Health System, Inc.
norm: tift regional health system

Name: Tift Regional Health System, Inc.
norm: tift regional health system
Industry: Healthcarellm

Discovered: Aug 16, 2022
Breach occurred: Aug 11, 2022 – Aug 17, 2022
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 11, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: notify applicable regulatory authorities where necessary

During the incident: Launched an investigation, with the assistance of third-party computer forensic specialists
Disabled the network proactively as a security response
Restored access quickly
Undertook a time intensive and thorough review of the documents at risk
Offering 12 months of complimentary access to credit monitoring services through Experian
Changes made: Continue to review our policies, procedures and processes related to the storage and access of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 51 weeks(360 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGAug 11 · first

Massachusetts State AGAug 11 · first

New Hampshire State AGAug 11 · first

Maine State AGAug 11 · first

Montana State AGAug 11 · first

Vermont State AGAug 11 · first · this page

South Carolina State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-08-11-tift-regional-health-system-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 11, 2023
Raw hash: 5a88c2eb2ab1b5c33e36e5069843bfda547747d6f154f725d3e6e7d4feb5d4df

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityTift Regional Health System, Inc.

Victim entityTift Regional Health System, Inc.

Incidentdiscovered Aug 16, 2022

Stated responseLaunched an investigation, with the assistance of third-party computer forensic specialists

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov