AccidentalHealthcareHealthcareMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Beartooth Billings Clinic

bd_acbeecd37ed12825 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 7, 2022

Filed

Dec 21, 2022

To disclose

6 weeks

Affected

20state residents only

Confidence

66%

Full breach record for Beartooth Billings Clinic →

Beartooth Billings Clinic notified individuals on Dec 21, 2022, of a Nov 7, 2022 incident where a document containing PII (name, phone, address, SSN) was inadvertently disclosed to a third party. The clinic enhanced employee training and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 44 days

Nov 7, 2022

Discovered

Dec 21, 2022

Filed

vs. sector median

6 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed20 affectedView incident

Name: Beartooth Billings Clinic
norm: beartooth billings clinic

Name: Beartooth Billings Clinic
norm: beartooth billings clinic
Industry: Healthcarellm

Discovered: Nov 7, 2022
Materiality determined: —
Notification sent: Dec 21, 2022
Affected individuals: 20state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Misconfiguration
MITRE ATT&CK: T1119 Automated Collection
Threat actor: External

During the incident: Enhanced its security measures to avoid reoccurrence of the situation by increasing its level of training and education for its employees
Providing you with access to Single Bureau Credit Monitoring services at no charge
Providing you with proactive fraud assistance
Changes made: Increasing its level of training and education for its employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(44 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-22.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 21, 2022
Raw hash: b46c01fbb344c85eb0ed3a47fb9662a8d2347256689f305b702ff68a5b13455a

Reporting entityBeartooth Billings Clinic

Victim entityBeartooth Billings Clinic

Incidentdiscovered Nov 7, 2022

Stated responseEnhanced its security measures to avoid reoccurrence of the situation by increasing its level of training and education for its employees

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov