MalwareHealthcareHealthcareRansomwareStolen CredentialsData EncryptedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDHealth (basic)Financial accountCriticalContained

Peachtree Neurological Clinic, P.C.

bd_adc3a8719052b273 · schema v1 · pii pii-v1

Severity

Critical

Discovered

May 10, 2017

Filed

Jul 6, 2017

To disclose

8 weeks

Affected · nationwide

176,29518 in this filing

Linked

5 filings

Confidence

64%

Full breach record for Peachtree Neurological Clinic, P.C. →

Peachtree Neurological Clinic (PNC) notified the NH AG of a breach affecting 176,295 patients. Unauthorized access occurred Feb 2016-May 2017. PNC's system was also infected by ransomware in May 2017, which encrypted EMRs but did not exfiltrate data. PNC restored files from backups. Potential exposure of PHI, SSNs, DOB, driver's licenses, and financial info. Notification sent July 7, 2017, offering 12 months credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 464 days

discovery → filing · 8 weeks / 57 days

Feb 1, 2016

Begins

May 10, 2017

Discovered

Jul 6, 2017

Filed

vs. sector median

4 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Montana State AGbd_ff0326c25871d5c32017-07-06Candidate
HHS OCRbd_803b99d6eaeb18712017-07-07 · +1dVerified
South Carolina State AGbd_479ac02af2456f7d2017-07-10 · +4dVerified
Massachusetts State AGbd_dad68f7876cb8f572017-07-10 · +4dVerified

Name: Freeman, Mathis & Gary, LLP
norm: freeman mathis gary

Name: Peachtree Neurological Clinic, P.C.
norm: peachtree neurological clinic
Industry: Healthcarellm

Discovered: May 10, 2017
Breach occurred: Feb 1, 2016 – May 1, 2017
Undetected for: 464 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 7, 2017
Affected individuals: 176,295state + nationwide
Data types: Identity (basic)Government IDHealth (basic)Financial account
Data elements: Medical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General pursuant to N.H. Rev. Stat. § 359-C:10

During the incident: Reported the incident to law enforcement and will cooperate with any investigation
Installed a new firewall
Instructed all employees to change all passwords used to log in to its computers
Contracted with a third-party IT company to provide additional security
Offering all affected individuals 12 months of MyIDCareTM identity theft monitoring and protection from ID Expert
Changes made: Contracting with a third-party IT company to provide additional security
Evaluating additional measures to further strengthen its data security
Secured our EMR system and implemented additional security measures to help prevent any unauthorized access
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(57 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGJul 6 · first

New Hampshire State AGJul 6 · first · this page

HHS OCR+1d

South Carolina State AG+4d

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/peachtree-neurological-20170706.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 6, 2017
Raw hash: 62c6465e52fa9aa5a622cb3b5d93b39c15a6273386518d86292798d81968fbce

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityFreeman, Mathis & Gary, LLP

Victim entityPeachtree Neurological Clinic, P.C.

Incidentdiscovered May 10, 2017

Stated responseReported the incident to law enforcement and will cooperate with any investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov