MisuseHealthcareHealthcarePrivilege AbuseEmployee Data InvolvedDelayed DiscoveryIdentity (basic)Government IDPHIHealth (basic)MediumContained

Med Center Health

bd_aa2ceec7a94f06c4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 4, 2017

Filed

Mar 24, 2017

To disclose

11 weeks

Affected

7state residents only

Linked

3 filings

Confidence

65%

Full breach record for Med Center Health →

Med Center Health notified patients of an insider threat incident where a former employee misappropriated billing information (SSN, health insurance, diagnosis codes) on encrypted media in 2014 and 2015. The breach was discovered in Jan 2017; notification was delayed at law enforcement's request. Remediation included staff re-education and credit monitoring offers.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 887 days

discovery → filing · 11 weeks / 79 days

Aug 1, 2014

Begins

Jan 4, 2017

Discovered

Mar 24, 2017

Filed

vs. sector median

1 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_6f8be1882ea4b5732017-03-24Candidate
Massachusetts State AGbd_cca98de35a390ccc2017-03-24Verified

Name: Commonwealth Health Corporation
norm: commonwealth health

Name: Med Center Health
norm: med center health
Industry: Healthcarellm

Discovered: Jan 4, 2017
Breach occurred: Aug 1, 2014 – Feb 28, 2015
Undetected for: 887 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 22, 2017
Affected individuals: 7state-resident count only
Data types: Identity (basic)Government IDPHIHealth (basic)
Data elements: Social Security numberMedical information
Attack vector: Insider
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: InternalFinancial
Regulator citations: Reporting the matter to law enforcementProviding government officials with information we gathered as part of our internal investigation
Initial access: insider_action

During the incident: Reporting the matter to law enforcement
Providing government officials with information we gathered as part of our internal investigation
Offering you a complimentary one-year membership of Experian’s ProtectMyID Alert
Changes made: Reinforcing education with our staff regarding our strict policies and procedures in maintaining the confidentiality of patient information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(79 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGMar 24 · first

Massachusetts State AGMar 24 · first

Montana State AGMar 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Commonwealth-Health-Corporation.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 24, 2017
Raw hash: 90d17075a77fc02fdc5e0f8dc3a3901c04b0d152320d46b2b21c72fdea049489

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityCommonwealth Health Corporation

Victim entityMed Center Health

Incidentdiscovered Jan 4, 2017

Stated responseReporting the matter to law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov