MalwareHealthcareHealthcareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedFinancial accountHealth (basic)Identity (basic)Government IDPHICriticalContained

Smile Brands Group Inc.

bd_b38f99f429ded2c9 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Apr 24, 2021

Filed

Oct 8, 2021

To disclose

24 weeks

Affected

108,927state residents only

Linked

8 filings

Confidence

68%

Full breach record for Smile Brands Group Inc. →4 incidents on file

Smile Brands Inc. reported a ransomware attack discovered on April 24, 2021, affecting systems containing PHI and PII. The incident involved unauthorized access and data acquisition by a third party. 108,927 Washington residents were notified. The company engaged forensic firms, notified law enforcement, and offered 1 year of credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d24 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 1 days

discovery → filing · 24 weeks / 167 days

Apr 23, 2021

Begins

Apr 24, 2021

Discovered

Oct 8, 2021

Filed

vs. sector median

+13 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Maine State AGbd_74aefa527fd325d92021-10-08Verified
Oregon State AGbd_bdaabc04103b621a2021-10-08Verified
New Hampshire State AGbd_8a684ab18a1d61082021-10-04 · +4dVerified
Montana State AGbd_97047e3f9d80ac212021-09-28 · +10dVerified

Show 3 more filings ↓up to 186d gap

California State AGbd_ee44aad4e560c1f02021-09-03 · +35dCandidate
Maine State AGbd_42b3fc4c92289ef42022-04-12 · +186dVerified
Maine State AGbd_9aabf34d95d33b302022-04-12 · +186dVerified

Name: Smile Brands Group Inc.
norm: smile brands

Name: Smile Brands Group Inc.
norm: smile brands
Industry: Healthcarellm

Discovered: Apr 24, 2021
Breach occurred: Apr 23, 2021 – Apr 24, 2021
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Oct 8, 2021
Affected individuals: 108,927state-resident count only
Data types: Identity (basic)PHIHealth (basic)
Data elements: NameSocial Security numberFinancial account numberDate of birthHealth insurance IDMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcement

During the incident: Terminated the unauthorized access to the affected systems
Launched an investigation
Notified law enforcement
Engaged leading cybersecurity firms to help assess the scope of the incident
Offering complimentary access to Experian IdentityWorks for 1 year
Changes made: Implementing heightened monitoring
Additional information security safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 weeks(167 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 6 states

View merged incident ↗

California State AGSep 3 · first

Montana State AG+25d

New Hampshire State AG+31d

Maine State AG+35d

Oregon State AG+35d

Washington State AG+35d · this page

Maine State AG+221d

Pattern: first filing Sep 3 (CA), last Apr 12 (ME) — a 221-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA2129.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 8, 2021
Raw hash: 87dd3ed763bd8070c5db321e5eed0c55a5436bc28cd707e501fd943c74385725

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entitySmile Brands Group Inc.

Victim entitySmile Brands Group Inc.

Incidentdiscovered Apr 24, 2021

Stated responseTerminated the unauthorized access to the affected systems

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com