HackingCustomer Data InvolvedIDENTITY_BASICHEALTH_BASICLowContained
Ravkoo
bd_b1c21d4401605dcb · schema v1 · pii pii-v1
Full breach record for Ravkoo →Ravkoo, a digital SaaS platform for prescription fulfillment, notified individuals of a data security incident on its AWS portal. An unauthorized third party attempted to infiltrate the portal on September 27, 2021. The incident may have exposed full names, mail addresses, phone numbers, and prescription/limited medical information. No SSN was accessed. Ravkoo provided one year of identity monitoring via Kroll.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_e271be692c34e932Oregon State AGfiled 2022-01-05(1d gap)Verified
- bd_e4f82f363cdb1218Maine State AGfiled 2022-01-05(1d gap)Verified
- bd_4b4f4f311c81eaeeWashington State AGfiled 2022-01-03(1d gap)Candidate
- bd_d601b80a96140270California State AGfiled 2022-01-03(1d gap)Verified
Show 2 more filings ↓Show fewer ↑up to 1d gap
- bd_d90f0cc5f913c2beNew Hampshire State AGfiled 2022-01-03(1d gap)Verified
- bd_e92fcd9fc02d394aMontana State AGfiled 2022-01-03(1d gap)Verified
Source provenance
- Source URL
- https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2022/Ravkoo.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 4, 2022
- Raw hash
- 5db0abe3d3c0a8710a3231708a975ca82c363dfebcf38ce5fca0bf9b57c3e0ef
Reporting entity
- Name
- Ravkoonorm: ravkoo
Victim entity
- Name
- Ravkoonorm: ravkoo
Incident
- Discovered
- Sep 27, 2021
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 weeks(99 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.